Senior Specialist Cybersecurity Production📣 Job Ad

About the Role

TawanTech is seeking a Senior Specialist Cybersecurity Production to join its team in Riyadh, Riyadh Province. This full-time role is dedicated to providing end-to-end production support for critical cybersecurity platforms, ensuring high availability and service reliability within banking or financial services environments. The position requires 2-5 years of relevant experience.

Role Purpose and Context

The primary purpose of this role is to maintain and enhance the operational effectiveness of cybersecurity infrastructure. The specialist will ensure continuous service reliability and proactive issue detection for platforms essential to securing banking and financial operations, contributing to a robust security posture.

Key Responsibilities

• Provide end-to-end production support for cybersecurity platforms, including Splunk (SIEM), SOAR, and VPN infrastructure, ensuring high availability and service reliability.
• Monitor security platforms, dashboards, and alerts to ensure continuous operational effectiveness and proactive issue detection.
• Manage Incident, Problem, and Change processes in accordance with ITIL standards, ensuring timely resolution and proper escalation.
• Perform root cause analysis (RCA) for system outages, performance degradation, and security incidents, implementing corrective and preventive actions.
• Administer and support Splunk use cases, correlation rules, log ingestion pipelines, and performance optimization.
• Operate and maintain SOAR playbooks, workflows, and automation scripts to enhance incident response and reduce manual intervention.
• Support VPN technologies, including secure remote access, site-to-site connectivity, authentication mechanisms, and encryption protocols.
• Execute Disaster Recovery (DR) and Business Continuity Plan (BCP) activities, including regular testing, failover validation, and documentation updates.
• Collaborate with internal security teams, infrastructure teams, and external vendors for issue resolution, patching, upgrades, and system enhancements.
• Maintain operational documentation, including runbooks, SOPs, playbooks, system configurations, and knowledge base articles.
• Implement monitoring, alert tuning, and automation to improve detection accuracy, reduce false positives, and increase operational efficiency.
• Track KPIs, SLAs, and system performance metrics for cybersecurity platforms and produce operational reports.

Compliance and Governance

A critical aspect of this role involves ensuring compliance with regulatory frameworks such as the SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO data governance and classification requirements. The specialist will ensure all operational activities align with established security policies and standards.

Required Experience and Technical Skills

Candidates for this role should have 2-5 years of experience in cybersecurity production support, particularly within banking or financial services environments. Proficiency with cybersecurity platforms such as Splunk (SIEM), SOAR, and VPN infrastructure is essential. Familiarity with ITIL standards for Incident, Problem, and Change management is also required.

Work Environment and Location

This is a full-time position based in Riyadh, Riyadh Province, Saudi Arabia. The role involves collaboration with various internal and external teams to maintain and enhance cybersecurity operations.