Security Operations & Monitoring Engineer

About the role

Requirements

• Required Qualifications & Experience
• - Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or related field.
• - 4+ years of experience in SOC, SIEM, security monitoring, incident triage, or cybersecurity operations.
• - Hands-on experience with SIEM and security monitoring platforms.
• - Good understanding of security events, logs, alerts, incident handling, and escalation procedures.
• - Experience integrating security solutions with central SOC/SIEM platforms.
• - Strong analytical and troubleshooting skills.
• - Must be available full-time onsite in Dammam.
• Required Certification
• - CompTIA Security+.
• Preferred Certifications
• - CompTIA CySA+.
• - Splunk Core Certified Power User.
• - Splunk Certified Cybersecurity Defense Analyst.
• - Equivalent recognized SIEM/SOC certification.
• Core Competencies
• SOC | SIEM | Security Monitoring | Incident Triage | Log Analysis | Incident Response | Alert Management | Threat Detection | Reporting
• Candidates should include the SIEM/SOC platforms they have used, the type of monitoring environments they supported, and their relevant certifications.

Responsibilities

• Perform continuous monitoring of cybersecurity systems and infrastructure.
• Monitor encryption, KMS, HSM, database security, and other security-related events.
• Review and analyze system, security, audit, and application logs.
• Monitor security alerts through SIEM/SOC platforms.
• Perform first-level investigation and triage of cybersecurity events.
• Correlate alerts from multiple security technologies to identify potential incidents.
• Escalate critical or suspicious activities according to established procedures.
• Support incident-response investigations and evidence collection.
• Coordinate with engineering teams during security incidents and service-impacting events.
• Support the tuning of monitoring rules and alert thresholds.
• Prepare operational, security, and incident reports.
• Maintain incident records, monitoring procedures, and operational documentation.
• Participate in shift, maintenance, and on-call activities when required.

Skills

• SIEM
• SOC
• Security Monitoring
• Incident Triage
• Log Analysis
• Incident Response
• Alert Management
• Threat Detection
• Reporting
• Splunk
• Encryption
• KMS
• HSM
• Database security
• Security event correlation