Senior Cyber Security Engineer

About the Role

ITBuilders is seeking a Senior Cyber Security Engineer to join their team in Riyadh, Saudi Arabia. This is a full-time, on-site position focused on implementing and optimizing security solutions, particularly with Fortinet FortiSIEM and FortiSOAR. The role involves developing automation, integrating security tools, and supporting incident response efforts.

Role Context

The Senior Cyber Security Engineer will specialize in security automation and SIEM/SOAR technologies. This position requires a professional with 5-10 years of experience in cybersecurity, ready to contribute to the enhancement of security operations and compliance within the organization.

Key Responsibilities

• Implement, configure, and administer FortiSIEM and FortiSOAR solutions.
• Develop SIEM correlation rules, event parsers, detection use cases, and dashboards.
• Design and maintain SOAR playbooks to automate security operations and incident response.
• Develop Python, PowerShell, or Bash scripts and REST API integrations.
• Integrate security tools, including firewalls, EDR, identity, cloud, and threat intelligence platforms.
• Investigate security alerts, perform log analysis, threat hunting, and incident response.
• Optimize SIEM performance, detection accuracy, and automation workflows.
• Support compliance requirements, including NCA ECC-2, SAMA CSF, PDPL, and ISO 27001.
• Prepare technical documentation and provide advanced troubleshooting and customer support.

Required Qualifications and Experience

• 5-10 years of experience in cybersecurity.
• Hands-on experience with FortiSIEM and FortiSOAR implementation and administration.
• Strong scripting skills in Python, PowerShell, or Bash, including REST API integrations.
• Experience developing SIEM correlation rules, event parsers, detection use cases, and SOAR playbooks.
• Knowledge of incident response, log analysis, threat hunting, and security tool integrations.
• Understanding of network, endpoint, identity, and cloud security.
• Familiarity with NCA ECC-2, SAMA CSF, PDPL, ISO 27001, and NIST.
• Relevant Fortinet or cybersecurity certifications are considered an advantage.

Work Environment

This is an on-site, full-time position based in Riyadh, Riyadh, Saudi Arabia. The role requires active participation within a team environment to manage and enhance cybersecurity infrastructures.