Cyber security jobs in Dubai, Abu Dhabi and Saudi Arabia are one of the larger tech hiring groups in the Gulf. On Gulf Dev Jobs on 16 October 2026 there were 80 open security jobs at 37 companies. Riyadh had the most, then Doha, Dubai and Abu Dhabi. None of the 80 asked for Arabic, and 14 (18%) were fully remote.
This guide shows where the roles are, which skills employers ask for, why regulation drives so much of the demand, and what to expect on pay and visas. We use our own job data and official sources; where official information isn’t clear, we say so.
Cyber security jobs in the Gulf at a glance
| Measure | Value |
|---|---|
| Open security jobs | 80 |
| Companies hiring | 37 |
| Fully remote | 14 (18%) |
| Ask for Arabic | 0 |
| Ad states visa sponsorship | 2 |
| Share of all tech jobs on the board | About 6% (81 of 1,307 in the October 2026 report) |
Source: security jobs on Gulf Dev Jobs on 16 October 2026.
By city
| City | Open security jobs |
|---|---|
| Riyadh | 17 |
| Doha | 9 |
| Dubai | 8 |
| Abu Dhabi | 7 |
| Al Khobar | 3 |
| Dammam | 3 |
| Jeddah | 2 |
| Sharjah | 1 |
| Muscat | 1 |
The rest are remote roles open to people in the region, or ads that don’t name a city. Saudi Arabia has the most on-site security jobs on our board: Riyadh, the Eastern Province cities (Al Khobar and Dammam) and Jeddah together had 25.
What kinds of cyber security jobs there are
Here are real job titles from the board on 16 October 2026, grouped by area. They show the spread better than any category list.
| Area | Example titles (company, city) |
|---|---|
| Security operations | Senior Manager, Security Operations (Qiddiya Investment Company, Riyadh); Cyber Security Analyst L2 (Wipro, Doha); Security Analyst (Core42, Abu Dhabi) |
| Governance, risk and compliance (GRC) | Senior Specialist, Information Security (GRC) (Tabby, Dubai); Senior IT Cyber Security Assurance and Risk Specialist (ENEC); Cyber Security IT Assurance Senior Analyst (ENOC, Dubai) |
| Identity and access | IAM/PAM Resident Cybersecurity Engineer (DeepSource Technologies, Riyadh) |
| Application security | Application Security Lead (Malomatia, Doha); Systems Engineer, AppSec (Fortinet, Dubai) |
| Cloud security | Engineer, Cloud Security (Malomatia, Doha); Cloud Security Architect Lead (ENEC) |
| OT and industrial security | Cybersecurity Service Engineer (Emerson, Al Khobar); Lead Engineer, Cyber Security (GE Vernova, Al Khobar) |
| Leadership and audit | Head of Cyber Security (Salla, Al Khobar); VP and Head of Audit, Information Security (First Abu Dhabi Bank, Abu Dhabi); Deputy Regional Information Security Officer (Kraken, remote UAE) |
| Consulting | Cyber Security Consultant (Gulf Business Machines, Muscat) |
A few patterns stand out:
- GRC is a big share. Many roles are about policies, risk assessments and audits against national standards, not only hands-on engineering. If you’ve done ISO 27001 or similar compliance work, you’ll find openings.
- OT security shows up in Saudi Arabia’s Eastern Province. Industrial and energy companies in Al Khobar, such as Emerson and GE Vernova, were hiring for operational technology (OT) security.
- Vendors and integrators hire too. Security vendors, system integrators and consultancies hire engineers who deploy and run their products for clients in the region.
Why demand is high: the rules behind it
Regulation creates a lot of these jobs. Government bodies, banks and critical infrastructure operators must meet national security controls, and they need people to put those controls in place and prove compliance.
Saudi Arabia: the National Cybersecurity Authority (NCA)
Saudi Arabia’s National Cybersecurity Authority (NCA) was set up by royal decree in October 2017 and reports to the King (Wikipedia). A 2018 royal decree required government agencies to follow NCA policies, frameworks, standards and guidelines. In October 2018 the NCA issued its core controls document, the Essential Cybersecurity Controls (ECC), setting minimum requirements, and in 2020 it added Cloud Cybersecurity Controls.
What that means for job seekers:
- Knowing NCA ECC and the other NCA frameworks helps in Saudi GRC, audit and compliance roles. If you’ve worked with ISO 27001, NIST or similar, say how that maps to NCA requirements in your CV.
- Government entities, and companies that run critical systems or serve government, need compliance, audit and security operations staff. That’s where much of Riyadh’s demand comes from.
The NCA publishes its frameworks and controls on its own website (nca.gov.sa). In our checks the site didn’t load from outside Saudi Arabia, so you may need to open it from within the Kingdom or ask a recruiter for the current versions. We couldn’t confirm the current list of NCA control documents directly, so check the NCA site before you rely on a specific document name or version.
UAE: Dubai Electronic Security Center and federal bodies
In Dubai, the Dubai Electronic Security Center (DESC) runs the Dubai Cyber Security Strategy, whose stated goal is “making Dubai the safest city in cyberspace” (DESC). DESC publishes standards for government entities, including the Information Security Regulation (ISR), a Cloud Service Provider (CSP) Security Standard, an ICS standard, an IoT Security Standard and a standard for electronic biomedical devices. It also has a Cyber Skills Framework, and runs certification and licensing schemes for providers.
At federal level, the Telecommunications and Digital Government Regulatory Authority (TDRA) offers security services to government entities, such as penetration testing, incident reporting and awareness sessions (TDRA).
For job seekers, “DESC ISR” and “CSP standard” are the UAE equivalents of “NCA ECC” in Saudi ads. Dubai government entities, and suppliers that serve them, look for people who know them.
Cyber security jobs in Dubai and Abu Dhabi
Dubai and Abu Dhabi together had 15 security jobs on the board. The employers range from banks and fintechs (First Abu Dhabi Bank, Tabby) to energy companies (ENOC, ENEC), AI and cloud companies (Core42) and vendors (Fortinet, Atos).
Cyber security jobs in Dubai for freshers
Entry-level security jobs are rare on our board. Across all tech roles, interns and juniors were about 4% of the ads in the October 2026 report. Most of the security titles above are senior, lead or manager roles. If you’re starting out:
- Look at SOC analyst roles (L1 or L2) at managed security providers and system integrators, a common way in.
- Get a recognised entry-level certification and a home lab you can talk about.
- Apply directly to graduate programmes at large employers.
Cyber security jobs in Dubai with visa sponsorship
Only 2 of the 80 security ads stated visa sponsorship on 16 October 2026. But in the UAE, employers that hire someone on-site normally arrange the work permit and residence visa as part of the hire, so most on-site security jobs come with a visa even if the ad doesn’t say so. See our guide to work visas in the UAE and Saudi Arabia.
Cyber security jobs in Saudi Arabia for foreigners
Saudi Arabia had the most on-site security jobs on our board. Foreign specialists are hired, especially for senior, OT, architecture and leadership roles. Some points to check:
- Government and defence roles may be open only to Saudi nationals or need a security clearance. The ad usually says so.
- Saudisation rules push employers to hire Saudi nationals where they can, so junior roles are harder to get as a foreigner.
- Premium Residency gives senior specialists a residence that isn’t tied to one employer. See our guide to Saudi Premium Residency for tech talent.
- Engineer job titles. If your Saudi job title includes “engineer”, read our guide to Saudi Council of Engineers registration.
Cyber security salary in Dubai and Riyadh
None of the 80 security ads on our board stated a salary on 16 October 2026, so we can’t give you a security-specific figure from our data. We don’t estimate pay.
What we can tell you:
- Across all tech roles, only 28 of 1,298 ads stated a salary on 16 October 2026, with a median of USD 159,250 a year, mostly from international remote employers (October 2026 report). That’s not a local security benchmark.
- Gulf packages are usually split into basic salary plus housing and transport allowances. Compare the total monthly package, not just the basic. Our salary guide explains how.
- In the UAE, a monthly salary of AED 30,000 or more is one of the conditions for the Golden Visa for skilled professionals (u.ae). Use our UAE visa salary check to compare an offer with the thresholds.
- There’s no personal income tax in the UAE or Saudi Arabia. Use the salary after tax calculator to compare with your home country.
How to stand out
- Name the frameworks. Put the standards you’ve worked with near the top: ISO 27001, NIST CSF, and for the region NCA ECC or DESC ISR if you have them.
- Show cloud and identity skills. Cloud security, IAM and PAM roles appear in current ads, and cloud skills (AWS, Azure) are among the most common across all Gulf tech ads. Our DevOps and SRE jobs overlap with many cloud security roles.
- Be specific about your SOC experience. Tools, alert volumes, playbooks you wrote, incidents you handled.
- Have your degree attested. UAE work permits and visas at higher skill levels depend on your qualification (u.ae), and the attestation process can take weeks.
For the wider picture of where Gulf tech jobs are, see the UAE and Saudi job market for tech in numbers.
Rules and figures in this guide change. It’s general information, not legal or career advice; check the official sources before you decide.
Frequently asked questions
How many cyber security jobs are there in Dubai?
On Gulf Dev Jobs on 16 October 2026 there were 8 open security jobs in Dubai and 7 in Abu Dhabi, out of 80 across the Gulf. These are the jobs on our board, not the whole market. See the current list of security jobs in Dubai.
What is the NCA in Saudi Arabia?
The National Cybersecurity Authority is Saudi Arabia’s national cyber security regulator, set up by royal decree in 2017. It issues controls and frameworks, such as the Essential Cybersecurity Controls (ECC), that government agencies must follow. Knowing them helps in Saudi GRC and compliance roles.
What is NCA ECC?
The Essential Cybersecurity Controls are the NCA’s baseline set of security requirements, first issued in 2018 to set minimum standards for national agencies. Compliance work against them creates many GRC, audit and security operations jobs in Saudi Arabia. Check the NCA website (nca.gov.sa) for the current version.
Can foreigners get cyber security jobs in Saudi Arabia?
Yes, especially in senior, architecture, OT and leadership roles. On 16 October 2026, Riyadh had 17 security jobs on our board, none of which asked for Arabic. Some government and defence roles are limited to Saudi nationals, and the ad will usually say so.
Are there remote cyber security jobs in the UAE?
Some. 14 of the 80 security jobs on our board (18%) were fully remote on 16 October 2026. Check where the employer allows you to live; “remote” can mean remote within the UAE only. See remote jobs.
What is the cyber security salary in Dubai per month?
We can’t give a reliable figure: none of the security ads on our board stated a salary on 16 October 2026, and we don’t estimate. Ask for the full monthly package, including housing and transport allowances, and compare it using our salary guide.