SIEM Security Operations Engineer (Saudi Nationals)

About the role

We are looking for experienced SIEM Security Operations Engineers to support enterprise cybersecurity monitoring, threat detection, incident analysis, and vulnerability management within a highly secure cloud environment. The role involves deploying and operating the organization’s SIEM platform, integrating security products, and coordinating remediation activities across cloud services and enterprise infrastructure.

Key responsibilities

• Deploy, configure, and operate the enterprise SIEM platform, integrating logs from WAF, HIDS, DDoS protection systems, cloud platforms and other security technologies.
• Configure and optimize correlation rules, alert logic, dashboards and detection use cases.
• Monitor security events, investigate alerts, perform initial triage and escalate validated incidents.
• Manage vulnerability tickets for cloud services and enterprise platforms, coordinate remediation and verify post‑remediation.
• Support compliance initiatives, maintain documentation and conduct technical demonstrations for audits or regulatory reviews.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a related field.
• Minimum 2 years of professional experience in SIEM security operations, SOC or cybersecurity monitoring.
• Saudi national.
• Hands‑on experience operating SIEM platforms in enterprise environments.
• Strong analytical, troubleshooting and communication skills in English.

Required skills

• SIEM platforms and security log collection, correlation and analysis.
• Security monitoring, threat detection and incident triage.
• Vulnerability management and remediation workflows.
• DDoS protection, Web Application Firewall (WAF) and Host Intrusion Detection Systems (HIDS).
• Cloud security platforms and cloud‑native security services.