Senior Specialist - Cybersecurity Production Support

Job Summary

We are seeking a Senior Specialist in Cybersecurity Production Support based in Riyadh, Saudi Arabia, to join our dynamic team. This role focuses on ensuring the robust operation and stability of cybersecurity platforms while providing continuous monitoring and quick incident response within enterprise environments.

Primary Responsibilities

• Deliver production support for cybersecurity systems including SIEM, SOAR, VPN, and related monitoring tools.
• Oversee platform health through dashboards, alerts, and operational activities to ensure availability and security.
• Maintain and enhance Splunk SIEM use cases, including managing log ingestion and tuning correlation rules for optimal performance.
• Manage SOAR automation workflows, developing and maintaining playbooks to streamline security processes.
• Support VPN infrastructure that enables secure remote access and site-to-site connectivity solutions.
• Execute Incident, Problem, and Change Management following established ITIL guidelines.
• Perform Root Cause Analysis to identify and resolve the underlying causes of security incidents and operational issues.
• Contribute to Cyber Incident Response efforts, including investigations and remediation actions.
• Participate in Disaster Recovery and Business Continuity initiatives to maintain operational resilience.
• Maintain accurate and updated security documentation, runbooks, standard operating procedures, and generate operational reports.
• Collaborate closely with security teams, infrastructure groups, and external vendors to resolve issues effectively.

Required Qualifications and Skills

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Between four and eight years of practical experience supporting cybersecurity production environments, preferably in enterprise or financial sectors.
• Expertise with SIEM platforms, notably Splunk Enterprise or Splunk ES.
• Hands-on experience with SOAR tools such as Cortex XSOAR, Splunk SOAR, or equivalent.
• Working knowledge of VPN technologies including IPSec and SSL VPN.
• Proficient in security monitoring, incident response, threat detection, and log analysis.
• Familiarity with ITIL Incident, Problem, and Change Management processes.
• Preferred knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO standards.
• Basic scripting abilities, ideally in Python, PowerShell, or similar languages.