Senior Specialist - Cybersecurity Production Support - Saudi Arabia 🇸🇦
On-siteRiyadh, Riyadh Region, Saudi Arabia
Job Summary
Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions. Monitor dashboards, alerts, and operational activities while supporting Splunk SIEM use cases, log ingestion, and correlation rules. Manage SOAR workflows and automation processes, and perform Incident, Problem, and Change Management activities following ITIL practices. Conduct Root Cause Analysis for security incidents and support Cyber Incident Response, including investigation and remediation. Participate in Disaster Recovery and Business Continuity Planning, and maintain security documentation, runbooks, and operational reports. Collaborate with security, infrastructure, and vendor teams for issue resolution.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field
- 4–8 years of experience in cybersecurity production support within enterprise or financial environments
- Hands-on experience with SIEM platforms (Splunk Enterprise / Splunk ES preferred)
- Hands-on experience with SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
- Hands-on experience with VPN technologies (IPSec / SSL VPN)
- Experience with security monitoring and incident response
- Strong understanding of cybersecurity operations, threat detection, and log analysis
- Experience with ITIL Incident, Problem, and Change Management
Desired Qualifications
- Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO
- Basic scripting knowledge (Python, PowerShell, or similar)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.