Security Engineer

Security Detection & System Engineer (SOC Platforms / CDC Tooling)

We are seeking an experienced Security Detection & System Engineer to join our client’s cybersecurity team in Riyadh. This role is fully on‑site and requires deep expertise in SOC platforms, SIEM/XDR engineering, and CDC tooling.

Role Overview

The Security Detection & System Engineer will be responsible for engineering, maintaining, and optimizing the core SOC technology stack, including SIEM, XDR, UEBA, and SOAR platforms. The role requires strong hands‑on technical capability, platform reliability ownership, and the ability to support a high‑maturity Cyber Defense Center.

Key Responsibilities

• Install, configure, and maintain SOC platforms (SIEM/XDR/UEBA/SOAR) in line with vendor best practices and internal standards.
• Onboard, normalize, and validate log sources from on‑prem, cloud, and third‑party systems.
• Maintain and optimize connectors, parsers, ingestion pipelines, and data feed health.
• Develop, implement, and maintain SOAR playbooks, integrations, and automation workflows.
• Coordinate upgrades, patching, and tuning activities with minimal operational downtime.
• Support SOC analysts and detection engineers with dashboards, queries, and content deployment.
• Enforce RBAC and access controls; integrate SOC tools with identity and privileged access processes.
• Maintain accurate documentation, diagrams, and runbooks for all SOC tooling.

Minimum Experience & Qualifications

• 5+ years of hands‑on experience in SIEM/XDR/SOAR engineering and administration.
• Strong expertise in log onboarding, connectors, parsers, ingestion monitoring, and platform health.
• Experience with SOAR automation, RBAC, and enterprise SOC environments.
• Proven troubleshooting skills across ingestion, parsing, and platform performance.
• Strong documentation and operational discipline.

Preferred Certifications

• SIEM/XDR vendor certifications (preferred)
• Equivalent cybersecurity engineering certifications are also acceptable.

Education

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.

Work Model

📍 On‑site in Riyadh This role requires full on‑site presence due to the sensitivity of SOC operations