TAWANTECH

Senior Specialist - Cybersecurity Production Support - Saudi Arabia 🇸🇦

Riyadh, Saudi ArabiaPosted 1 months ago

Salary
AED 8k–15k a month· est.
Job type
Full time
Level
Senior
Field
Engineering & Technology
Work mode
On site

About the role

Senior Specialist – Cybersecurity Production Support – Saudi Arabia 🇸🇦 We are looking for a Senior Specialist – Cybersecurity Production Support to join our team in Saudi Arabia. Job Overview: The Senior Specialist will be responsible for supporting and maintaining cybersecurity platforms, ensuring high availability, operational stability, and effective security monitoring across enterprise environments. Key Responsibilities: - Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions. - Monitor cybersecurity platforms, dashboards, alerts, and operational activities. - Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization. - Manage and maintain SOAR workflows, playbooks, and automation processes. - Support VPN infrastructure including secure remote access and site-to-site connectivity. - Perform Incident, Problem, and Change Management activities following ITIL practices. - Conduct Root Cause Analysis (RCA) for security incidents and platform issues. - Support Cyber Incident Response activities including investigation and remediation. - Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP). - Maintain security documentation, runbooks, SOPs, and operational reports. - Collaborate with security teams, infrastructure teams, and vendors for issue resolution. Requirements: - Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field. - 4–8 years of experience in cybersecurity production support within enterprise or financial environments. - Hands-on experience with: - SIEM platforms (Splunk Enterprise / Splunk ES preferred) - SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar) - VPN technologies (IPSec / SSL VPN) - Security monitoring and incident response - Strong understanding of cybersecurity operations, threat detection, and log analysis. - Experience with ITIL Incident, Problem, and Change Management. - Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is preferred. - Basic scripting knowledge (Python, PowerShell, or similar) is preferred.

Requirements

  • Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
  • 4–8 years of experience in cybersecurity production support within enterprise or financial environments.
  • Hands-on experience with:
  • - SIEM platforms (Splunk Enterprise / Splunk ES preferred)
  • - SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
  • - VPN technologies (IPSec / SSL VPN)
  • - Security monitoring and incident response
  • - Strong understanding of cybersecurity operations, threat detection, and log analysis.
  • - Experience with ITIL Incident, Problem, and Change Management.
  • - Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is preferred.
  • - Basic scripting knowledge (Python, PowerShell, or similar) is preferred.

Responsibilities

  • Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions.
  • Monitor cybersecurity platforms, dashboards, alerts, and operational activities.
  • Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization.
  • Manage and maintain SOAR workflows, playbooks, and automation processes.
  • Support VPN infrastructure including secure remote access and site-to-site connectivity.
  • Perform Incident, Problem, and Change Management activities following ITIL practices.
  • Conduct Root Cause Analysis (RCA) for security incidents and platform issues.
  • Support Cyber Incident Response activities including investigation and remediation.
  • Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP).
  • Maintain security documentation, runbooks, SOPs, and operational reports.
  • Collaborate with security teams, infrastructure teams, and vendors for issue resolution.

Skills

  • Splunk Enterprise
  • Splunk ES
  • Cortex XSOAR
  • Splunk SOAR
  • SOAR platforms
  • VPN technologies (IPSec, SSL VPN)
  • Security monitoring
  • Incident response
  • ITIL Incident, Problem, Change Management
  • Log analysis
  • Threat detection
  • Scripting (Python, PowerShell)

Not sure you fit this role?

Upload your CV and see how you score against TAWANTECH and every other live job. It's free.

Get my free matches

AED 8k–15k a month· est.

Cyber Security jobs in Riyadh80 live roles, top employers and pay.See all →

Similar jobs in Saudi Arabia