Cyber Defense Specialist - Detection & Monitoring

About the role

CCDS is looking for a Cyber Defense Specialist focused on detection and monitoring, working on-site in Riyadh under a 13-month project-based managed cybersecurity engagement. The role strengthens SOC detection and monitoring across SIEM, SOAR, EDR, DLP, email security and other security platforms.

Key responsibilities

• Develop and enhance security detection across SIEM, SOAR, EDR, DLP and email security platforms
• Design correlation logic, detection rules, threat-detection use cases, alerts and response workflows
• Integrate telemetry and logs from security systems to improve monitoring coverage
• Tune detections to improve accuracy and reduce false positives
• Analyze security events and suspicious activity, escalating validated threats through approved processes
• Maintain SOC policies, procedures, workflows and operational playbooks
• Map detection coverage to MITRE ATT&CK and coordinate improvements with cybersecurity, governance and technical teams
• Support security assessments, regulatory compliance, reporting and vendor coordination

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field
• At least 7 years of experience in SOC operations or cyber defense
• Proven experience developing detection use cases and tuning security rules
• Knowledge of cyberattack techniques, threat detection, MITRE ATT&CK, NCA requirements and SOC operating models
• Preferred certifications: CISSP, GCIA, GSEC, GCIH, CISM or equivalent

Required skills

• Hands-on experience with SIEM, SOAR, EDR, DLP and email security gateways
• Log and telemetry integration
• Strong analytical and problem-solving skills, clear communication and documentation
• Able to prioritize alerts in a high-volume operational environment