Senior Security Operations Engineer

About the Role

Tencent Cloud Middle East is seeking a Senior Security Operations Engineer to join their team in the Kingdom of Saudi Arabia. This full-time individual contributor role focuses on supporting daily cybersecurity activities, including running established security processes, monitoring and triaging security events, and maintaining compliance documentation. The position involves coordination with central security and compliance teams and is suited for a candidate with 2-5 years of experience looking to advance in cloud security operations and compliance.

Key Responsibilities

• Execute and maintain security operations processes, procedures, and checklists defined by Tencent Cloud's security and compliance teams, tracking tasks and tickets to closure.
• Monitor security alerts, vulnerabilities, and risk items; perform initial triage, escalate to appropriate owners, and ensure risk and issue trackers are accurate and current.
• Support incident response activities under guidance, including collecting and preserving evidence, maintaining incident timelines, coordinating with responders, and drafting incident reports and post-incident summaries.
• Assist with the periodic review and upkeep of cybersecurity and privacy policies, procedures, guidelines, and compliance evidence to ensure documentation remains current and audit-ready.
• Prepare regular operational reports and dashboards on security posture, open risks, remediation progress, and compliance status for internal stakeholders.
• Support security awareness activities, internal communications, and the preparation of security documentation and questionnaire responses for customers and partners.

Qualifications and Experience

• Bachelor's degree, or equivalent practical experience.
• 3–5 years of hands-on experience in security operations, IT operations, data security, privacy, or compliance support. Internships and graduate programs are considered.
• Working knowledge of common security operations tasks, including alert monitoring, vulnerability management, access and entitlement review, log review, and incident documentation.
• Familiarity with cloud services and common security technologies (*, IAM, network security controls, encryption, SIEM, endpoint protection). Exposure to any major cloud platform is an advantage.
• Familiarity with information security and privacy standards and frameworks such as ISO 27001, NIST CSF, or PCI DSS. Experience supporting audits or certification activities is a plus.
• Basic awareness of information security and personal data protection requirements in Saudi Arabia (*, SAMA Cybersecurity Framework, PDPL, NCA controls) and a willingness to build deeper regulatory knowledge on the job.

Required Skills

• Detail-oriented approach to work.
• Comfortable working with processes, documentation, and cross-team coordination.
• Entry-level certifications (Security+, CC, ISO 27001 Foundation) are a plus, but not a requirement.

Work Environment

This role is based in the Kingdom of Saudi Arabia and operates as an individual contributor, focusing on operational execution rather than people management or strategic ownership.