Security Operations & Monitoring Engineer📣 Job Ad

About Cloud Consultancy - CCDS

Cloud Consultancy - CCDS is seeking a dedicated professional to join its team in Dammam, Eastern, Saudi Arabia. This full-time role offers an opportunity to contribute to robust cybersecurity operations within a dynamic environment.

The Role: Security Operations & Monitoring Engineer

The Security Operations & Monitoring Engineer will be responsible for continuous monitoring and security-event analysis across critical infrastructure components, including encryption, Key Management Systems (KMS), Hardware Security Modules (HSM), and database security. This role involves close collaboration with SOC/SIEM and technical teams to identify suspicious activities, triage security events, support incident response efforts, and ensure timely escalation and reporting.

Key Responsibilities

• Perform continuous monitoring of cybersecurity systems and infrastructure.
• Monitor encryption, KMS, HSM, database security, and other security-related events.
• Review and analyze system, security, audit, and application logs.
• Monitor security alerts through SIEM/SOC platforms.
• Conduct first-level investigation and triage of cybersecurity events.
• Correlate alerts from multiple security technologies to identify potential incidents.
• Escalate critical or suspicious activities according to established procedures.
• Support incident-response investigations and evidence collection.
• Coordinate with engineering teams during security incidents and service-impacting events.
• Support the tuning of monitoring rules and alert thresholds.
• Prepare operational, security, and incident reports.
• Maintain incident records, monitoring procedures, and operational documentation.
• Participate in shift, maintenance, and on-call activities when required.

Required Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• A minimum of 4 years of experience in SOC, SIEM, security monitoring, incident triage, or cybersecurity operations.
• Hands-on experience with SIEM and security monitoring platforms.
• Good understanding of security events, logs, alerts, incident handling, and escalation procedures.
• Experience integrating security solutions with central SOC/SIEM platforms.
• Strong analytical and troubleshooting skills.
• Must be available full-time onsite in Dammam.

Certifications

Candidates are required to hold the following certification:

• CompTIA Security+

Preferred certifications include:

• CompTIA CySA+
• Splunk Core Certified Power User
• Splunk Certified Cybersecurity Defense Analyst
• Equivalent recognized SIEM/SOC certification

Location and Work Type

This is a full-time position based onsite in Dammam, Saudi Arabia. The role requires consistent presence to ensure effective collaboration and operational oversight within the security team.