# Operations and Security Engineer

> Arabic.AI · Riyadh, Saudi Arabia · — · Posted 2026-11-09

**Workplace:** on_site

**Department:** Technology, AI, Products & PMO

## Description

What you will do 

-   Monitor the platform around the clock, respond to alerts, troubleshoot, fix and restore service. 

-   Handle emergencies inside or outside office hours, and turn around any report the client asks  

-   Patch, harden and run regular vulnerability reviews on every component; keep endpoint protection compatible. 

-   Implement and operate the security controls: identity and access with MFA, RBAC and single sign-on; encryption everywhere; separated dev, test and production; signed and verified automation code; file-type whitelisting; mobile-device restrictions. 

-   Run security logging, audit logs and the SIEM integration; protect logs from tampering. 

-   Secure the APIs: gateway, OAuth 2.0, OWASP API security. 

-   Own backups, business continuity and disaster recovery, and test them. 

-   Run incident response: immediate notification, an initial report within 24 hours, documented procedures with SLAs and escalation. 

-   Write the security architecture and API design documents and the infrastructure parts of the architecture pack, and the bi-monthly operations report. 

What you need 

-   Linux and Windows server administration on public and sovereign clouds (GCP, OCI, Deem or similar) 

-   Administration of at least two of Qlik Sense, Talend, Dataiku and MS SQL Server, plus GCP services 

-   Monitoring and alerting (Cloud Logging and Monitoring, Prometheus and Grafana or similar) and runbooks 

-   Incident management: triage, escalation, root-cause reports 

-   Identity and access: IAM, MFA, RBAC, SSO integration 

-   Encryption at rest and in transit, key management, certificates 

-   Vulnerability scanning, patching and hardening; working with endpoint-protection tools 

-   SIEM integration and audit-log design 

-   API gateways, OAuth 2.0, OWASP API Security Top Ten 

-   Backup, restore, business continuity and disaster recovery in the cloud 

Good to have 

-   Terraform and CI/CD; SRE practice (SLOs, error budgets, cost alerts) 

-   MS SQL Server DBA depth 

-   Google Professional Cloud Security Engineer, CISSP, CCSP or ITIL 

-   Experience with national cybersecurity-control audits

## Apply

[Apply at Arabic.AI](https://apply.workable.com/arabicai/j/C5718D1144/apply)

---
Powered by [Workable](https://www.workable.com)