Security Operations Engineer

About the role

Tencent Cloud Middle East is looking for a Security Operations Specialist based in the Kingdom of Saudi Arabia. The role supports the day-to-day operation of Tencent Cloud's cybersecurity activities: running established security processes, monitoring and triaging security events, maintaining compliance documentation and coordinating with Tencent Cloud's central security and compliance teams. It is an individual-contributor position for someone early in their security career who wants to grow into cloud security operations and compliance, with no people-management or strategy-ownership responsibilities.

Key responsibilities

• Execute and maintain security operations processes, procedures and checklists, tracking tasks and tickets to closure
• Monitor security alerts, vulnerabilities and risk items, triage them, escalate to the right owners and keep risk and issue trackers up to date
• Support incident response: collect and preserve evidence, maintain incident timelines, coordinate with responders and draft incident reports and post-incident summaries
• Help keep cybersecurity and privacy policies, procedures, guidelines and compliance evidence current and audit-ready
• Prepare regular operational reports and dashboards on security posture, open risks, remediation progress and compliance status
• Support security awareness, internal communications and customer/partner documentation and questionnaire responses

Required profile

• Bachelor's degree or equivalent practical experience
• 3-5 years of hands-on experience in security operations, IT operations, data security, privacy or compliance support; internships and graduate programmes count
• Clear written and verbal English; Arabic is a plus
• Detail-oriented, comfortable with process, documentation and cross-team coordination

Required skills

• Alert monitoring, vulnerability management, access and entitlement review, log review and incident documentation
• Familiarity with cloud services and technologies such as IAM, network security controls, encryption, SIEM and endpoint protection; exposure to a major cloud platform is a plus
• Familiarity with ISO 27001, NIST CSF or PCI DSS; experience supporting audits is a plus
• Basic awareness of Saudi Arabian data protection requirements (SAMA Cybersecurity Framework, PDPL, NCA controls)