Senior Cybersecurity Specialist (Splunk Architect)

About the Role

Help AG is seeking a Senior Cybersecurity Specialist (Splunk Architect) to join its Cyber Engineering department in Riyadh, Saudi Arabia. This full-time role involves creating procedures, implementing process development, and maintaining security systems across both internal and client environments. The specialist will collaborate with Management, Security Operation Center Analysts, Threat Analysts, Solution Architects, other Security Engineers, and clients to deliver critical services to existing Managed Security Service clients.

Core Responsibilities

The specialist will be responsible for the administration, maintenance, and integration of various SOC technologies, including SIEM, EDR, NDR, VA, and SOAR platforms. Key responsibilities include:

• Administering Splunk and Splunk Apps, including developing new or extending existing Apps for specialized functionality.
• Integrating Splunk with a wide variety of legacy data sources.
• Learning and adapting to new SOC technologies from different vendors.
• Engaging application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.
• Designing, implementing, and supporting solutions with Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 Advanced Threat Protection (O365 ATP), and Microsoft Defender ATP.
• Handling the implementation, deployment, and support of Vulnerability scan engines in coordination with Engineering, SOC, and IR teams.
• Documenting vulnerabilities and working on vulnerability mitigation with agreed SLAs.
• Managing EDR sensors, including deployment, operation, management, maintenance, updates, upgrades, patching, and administration.
• Creating watchlists to detect Indicators of Compromise (IoCs) and malicious behavior of new threats.
• Assessing customer needs, designing solutions, and implementing those designs.
• Building and solving problems using new technology to determine viability.
• Serving as a primary responder for Managed Security customer systems, taking ownership of client configuration issues and tracking through resolution.
• Collaborating with SOC team members on operational tasks and initiatives to enhance service quality.
• Proactively fine-tuning false positives and enhancing processes with other MSS teams.
• Developing content for SOC technologies, such as use cases for Splunk, in cooperation with the SOC.

Required Experience

Candidates should possess 3-5 years of relevant experience in cybersecurity, with a focus on Splunk architecture and SOC technologies.

Benefits

Help AG offers a comprehensive benefits package, including:

• Health insurance with a leading global provider.
• Opportunities for career progression and growth through challenging projects.
• Employee engagement activities throughout the year.
• Tailored training and development programs.