Senior Specialist Cybersecurity Production Support

About the Role

TAWANTECH is seeking a Senior Specialist Cybersecurity Production Support to join their team in Riyadh, Saudi Arabia. This full-time role involves providing end-to-end production support for cybersecurity platforms, ensuring high availability and service reliability. The specialist will focus on platforms including Splunk (SIEM), SOAR, and VPN infrastructure.

Key Responsibilities

• Monitor security platforms, dashboards, and alerts to ensure continuous operational effectiveness and proactive issue detection.
• Manage Incident, Problem, and Change processes in accordance with ITIL standards, ensuring timely resolution and proper escalation.
• Perform root cause analysis (RCA) for system outages, performance degradation, and security incidents, implementing corrective and preventive actions.
• Administer and support Splunk use cases, correlation rules, log ingestion pipelines, and performance optimization.
• Operate and maintain SOAR playbooks, workflows, and automation scripts to enhance incident response and reduce manual intervention.
• Support VPN technologies including secure remote access, site-to-site connectivity, authentication mechanisms, and encryption protocols.
• Ensure compliance with SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO data governance and classification requirements.
• Execute Disaster Recovery (DR) and Business Continuity Plan (BCP) activities, including regular testing, failover validation, and documentation updates.
• Collaborate with internal security teams, infrastructure teams, and external vendors for issue resolution, patching, upgrades, and system enhancements.
• Maintain operational documentation including runbooks, SOPs, playbooks, system configurations, and knowledge base articles.
• Implement monitoring, alert tuning, and automation to improve detection accuracy, reduce false positives, and increase operational efficiency.
• Track KPIs, SLAs, and system performance metrics for cybersecurity platforms and produce operational reports.

Qualifications and Experience

• A minimum of 5 to 10 years of experience in cybersecurity production support.
• Basic scripting or automation knowledge (Python, PowerShell, or similar) is preferred.

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia. The role involves working within a collaborative environment, engaging with internal teams and external vendors to maintain and enhance cybersecurity platforms.