Senior Specialist Cybersecurity Production📣 Job Ad

About the Role

TAWANTECH is seeking a Senior Specialist Cybersecurity Production to provide end-to-end production support for critical cybersecurity platforms. This full-time role focuses on ensuring high availability and service reliability of security infrastructure within a banking or financial services environment. The specialist will manage ITIL processes, conduct root cause analysis, and ensure compliance with various cybersecurity frameworks.

Key Responsibilities

• Provide comprehensive production support for cybersecurity platforms, including Splunk (SIEM), SOAR, and VPN infrastructure, ensuring high availability and service reliability.
• Monitor security platforms, dashboards, and alerts to maintain continuous operational effectiveness and facilitate proactive issue detection.
• Manage Incident, Problem, and Change processes in adherence to ITIL standards, ensuring timely resolution and appropriate escalation.
• Perform root cause analysis (RCA) for system outages, performance degradation, and security incidents, implementing corrective and preventive actions.
• Administer and support Splunk use cases, correlation rules, log ingestion pipelines, and performance optimization.
• Operate and maintain SOAR playbooks, workflows, and automation scripts to enhance incident response and minimize manual intervention.
• Support VPN technologies, including secure remote access, site-to-site connectivity, authentication mechanisms, and encryption protocols.
• Execute Disaster Recovery (DR) and Business Continuity Plan (BCP) activities, including regular testing, failover validation, and documentation updates.
• Collaborate with internal security teams, infrastructure teams, and external vendors for issue resolution, patching, upgrades, and system enhancements.
• Maintain operational documentation, including runbooks, SOPs, playbooks, system configurations, and knowledge base articles.
• Implement monitoring, alert tuning, and automation to improve detection accuracy, reduce false positives, and increase operational efficiency.
• Track KPIs, SLAs, and system performance metrics for cybersecurity platforms and produce operational reports.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• 4–8 years of experience in cybersecurity production support, specifically within banking or financial services environments.
• Experience with ITIL processes, including Incident, Problem, and Change Management.
• Familiarity with DR/BCP planning, execution, and audit requirements.

Technical Skills and Platform Experience

• Hands-on experience with Splunk (Enterprise / ES), SOAR platforms (*, Cortex XSOAR, Splunk SOAR), and VPN solutions (*, IPSec, SSL VPN).
• Strong understanding of SIEM use cases, log management, threat detection, and incident response workflows.
• Basic scripting or automation knowledge (Python, PowerShell, or similar) is preferred.
• Experience working with vendors and managed service providers for cybersecurity tools and platforms.

Regulatory Compliance

• Exposure to SAMA regulations, NCA ECC controls, PDPL, and NDMO data governance frameworks.
• Ensure compliance with SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO data governance and classification requirements.

Application Information

This role offers an opportunity to contribute to the robust cybersecurity posture of TAWANTECH. Salary details will be discussed during the interview process.