IT Security Specialist

About the role

The IT Security Specialist is responsible for the day‑to‑day operation, monitoring and maintenance of enterprise security tools across Geidea’s infrastructure. Working as a hands‑on technical executor within the IT Security team, the role ensures security platforms remain available, effective and compliant with regulatory requirements.

Key responsibilities

• Operate, monitor and maintain EDR, AV, NDR, DLP, Email Security, IAM, PAM and Data Classification tools with 99.99% availability.
• Triage, investigate and respond to security alerts from EDR, AV, NDR, DLP, Email Security and SIEM within defined SLA targets.
• Perform daily administration of security tools: apply policies, manage agent deployments, update signatures and review alert queues.
• Support IAM and PAM processes, including user access requests, joiner/mover/leaver workflows in Active Directory and SailPoint, and quarterly access certification reviews.
• Monitor DLP and email security events, review quarantined emails, investigate data‑loss incidents and escalate breaches.
• Assist with vulnerability management by running Nessus scans, compiling reports and tracking remediation tickets.
• Collect and organize evidence for PCI‑DSS, SAMA and NCA audit cycles, maintaining audit‑ready documentation.
• Update runbooks, operational procedures and incident‑response checklists, and participate in post‑incident reviews.

Required profile

• Hands‑on technical executor capable of operating security platforms under the guidance of the IT Security Team Lead.
• Strong analytical skills to investigate alerts and incidents within SLA timelines.
• Experience supporting compliance and audit activities for PCI‑DSS, SAMA and NCA.
• Ability to collaborate with asset owners and IT service management teams to close findings.

Required skills

• Endpoint Detection and Response (EDR) tools
• Data Loss Prevention (DLP) solutions
• Email security platforms
• Identity and Access Management (IAM) and Privileged Access Management (PAM) systems
• Network Detection and Response (NDR) tools
• Antivirus (AV) solutions
• Data classification tools
• Nessus vulnerability scanner
• Security Information and Event Management (SIEM) platforms
• Active Directory
• SailPoint