Cyber Defense Specialist Detection & Monitoring

About the Role

Cloud Consultancy - CCDS is seeking a Cyber Defense Specialist Detection & Monitoring to join our team in Riyadh, Saudi Arabia. This is a full-time position focused on enhancing the security posture of our operations through advanced detection and monitoring capabilities. The role requires a professional with 5-10 years of experience in cyber defense.

Role Purpose and Impact

The primary purpose of this role is to strengthen Security Operations Center (SOC) detection and monitoring capabilities. This involves working across various security platforms, including SIEM, SOAR, EDR, DLP, and email security, to ensure robust threat identification and response mechanisms are in place.

Key Responsibilities

• Develop and enhance security detection capabilities across SIEM, SOAR, EDR, DLP, and email security platforms.
• Design correlation logic, detection rules, threat-detection use cases, alerts, and supporting response workflows.
• Integrate telemetry and logs from security systems to improve monitoring coverage.
• Continuously tune detections to improve accuracy and reduce false positives.
• Analyze security events and suspicious activity, escalating validated threats through approved processes.
• Maintain SOC policies, procedures, workflows, and operational playbooks.
• Map detection coverage to MITRE ATT&CK framework and coordinate improvements with cybersecurity, governance, and technical teams.
• Support security assessments, regulatory compliance, reporting, and security-vendor coordination.

Required Experience and Skills

Candidates should possess 5-10 years of relevant experience in cyber defense or a related field. The role demands a professional with strong analytical and problem-solving abilities, coupled with effective communication and coordination skills.

• Strong analytical and problem-solving skills.
• Clear communication, documentation, and cross-team coordination abilities.
• Persistent, quality-focused, and comfortable working with vendors and technical partners.
• Ability to prioritize alerts and improvements effectively in a high-volume operational environment.

Technical Environment

This role operates within a dynamic security environment, requiring expertise across various platforms. Key technologies include Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Endpoint Detection and Response (EDR), Data Loss Prevention (DLP), and email security systems.

Application Information

We invite qualified candidates to apply for this full-time position in Riyadh. Salary details will be discussed during the interview process.