Senior Staff Cyber Security Engineer - Riyadh, KSA

Position Overview

Qualcomm is seeking a highly skilled and experienced Senior Staff Cyber Security Engineer to join our dynamic team in Riyadh, Kingdom of Saudi Arabia. In this critical role, you will play a pivotal part in safeguarding our organization’s digital infrastructure, intellectual property, and customer data against evolving cyber threats. As a Senior Staff Engineer, you will lead the design, implementation, and optimization of robust security frameworks while collaborating with cross-functional teams to ensure compliance with global security standards and best practices. This position offers a unique opportunity to contribute to cutting-edge security initiatives within a globally recognized technology leader.

Key Responsibilities

• Security Architecture & Strategy: Develop and enforce enterprise-wide security architectures, policies, and procedures to mitigate risks and enhance resilience against cyber threats. Lead the evaluation and adoption of emerging security technologies and methodologies.
• Threat Detection & Response: Spearhead the implementation of advanced threat detection systems, incident response protocols, and forensic investigations to identify, contain, and remediate security breaches in a timely manner.
• Risk Management & Compliance: Ensure adherence to international security frameworks (e.g., ISO 27001, NIST, SOC 2) and regional regulatory requirements. Conduct comprehensive risk assessments and audits to identify vulnerabilities and recommend corrective actions.
• Collaboration & Leadership: Partner with engineering, IT, and business teams to integrate security best practices into product development, infrastructure deployment, and operational processes. Mentor junior engineers and foster a culture of security awareness across the organization.
• Security Operations: Oversee the day-to-day operations of security tools, including SIEM, EDR, firewalls, and encryption solutions. Monitor security metrics and generate reports to senior leadership on the effectiveness of security measures.
• Vendor & Third-Party Risk Management: Assess and manage security risks associated with third-party vendors, suppliers, and partners to ensure alignment with Qualcomm’s security standards.

Qualifications & Skills

To excel in this role, candidates must possess a combination of technical expertise, leadership acumen, and a passion for cybersecurity. The ideal candidate will have:

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field. Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desirable.
• Minimum of 10 years of progressive experience in cybersecurity, with at least 5 years in a senior or leadership role. Experience in the technology or semiconductor industry is a strong plus.
• Deep knowledge of security frameworks, encryption protocols, network security, and cloud security (AWS, Azure, or GCP).
• Proficiency in security tools such as SIEM platforms (Splunk, QRadar), vulnerability scanners (Nessus, Qualys), and penetration testing tools (Metasploit, Burp Suite).
• Strong analytical and problem-solving skills, with the ability to assess complex security challenges and develop innovative solutions.
• Excellent communication and stakeholder management skills, with the ability to articulate technical risks and strategies to non-technical audiences.
• Fluency in English is required; proficiency in Arabic is a plus.

Why Join Qualcomm?

As a global leader in wireless technology innovation, Qualcomm offers a collaborative and inclusive work environment where employees are empowered to drive meaningful change. You will have the opportunity to work on groundbreaking projects that shape the future of connectivity, IoT, and 5G technologies. In addition to competitive compensation and benefits, Qualcomm provides professional development opportunities, access to cutting-edge resources, and the chance to make a lasting impact in the tech industry. Join us in Riyadh and be part of a team that is redefining the boundaries of what’s possible in cybersecurity.