Security Operations & Monitoring Engineer

About the Role

CCDS is seeking a Security Operations & Monitoring Engineer to join our team in Dammam. This full-time position requires 2-5 years of experience and focuses on providing continuous monitoring and security-event analysis across various critical security domains. The successful candidate will play a key role in identifying and responding to security threats within our infrastructure.

Key Focus Areas

This role involves dedicated oversight of security events related to encryption, Key Management Systems (KMS), Hardware Security Modules (HSM), database security, and associated infrastructure. The engineer will collaborate closely with SOC/SIEM and other technical teams to proactively identify suspicious activities, perform initial triage of security events, and support incident response efforts. A core responsibility is ensuring timely escalation and comprehensive reporting of all security-related findings.

Responsibilities

• Perform continuous monitoring of cybersecurity systems and infrastructure.
• Monitor security-related events, including those from encryption, KMS, HSM, and database security solutions.
• Review and analyze system, security, audit, and application logs.
• Monitor security alerts through SIEM/SOC platforms.
• Conduct first-level investigation and triage of cybersecurity events.
• Correlate alerts from multiple security technologies to identify potential incidents.
• Escalate critical or suspicious activities in accordance with established procedures.
• Support incident-response investigations and evidence collection.
• Coordinate with engineering teams during security incidents and service-impacting events.
• Support the tuning of monitoring rules and alert thresholds.
• Prepare operational, security, and incident reports.
• Maintain incident records, monitoring procedures, and operational documentation.
• Participate in shift, maintenance, and on-call activities as required.

Qualifications and Requirements

• 4+ years of hands-on experience with SIEM and security monitoring platforms.
• Good understanding of security events, logs, alerts, incident handling, and escalation procedures.
• Experience integrating security solutions with central SOC/SIEM platforms.
• Strong analytical and troubleshooting skills.

Work Environment

This is a full-time, onsite position based in Dammam. Candidates must be available to work from our Dammam office.

Application Process

We invite qualified candidates to apply for this role.