SIEM Admin📣 Job Ad

Company Overview

Innovative Solutions SA (IS) is a leading cybersecurity company established in 2003. Headquartered in Riyadh, Saudi Arabia, with additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi, we specialize in delivering comprehensive cybersecurity solutions and services. Our offerings encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services. Our mission is to empower organizations by delivering secure and intelligent digital services.

About the SIEM Administrator Role

Innovative Solutions SA is seeking a skilled SIEM Administrator to join our team in Riyadh, Saudi Arabia. This full-time role is central to designing, deploying, and maintaining our Security Information and Event Management (SIEM) platform. The SIEM Administrator will serve as the backbone of our log management and threat detection infrastructure, collaborating with various business units to integrate log sources, develop custom rules, and ensure the seamless operation of security tools to protect enterprise assets.

Key Responsibilities

• Design, deploy, patch, and upgrade the SIEM platform and its associated agents.
• Collaborate with business units to map network hierarchies, establish building blocks, and classify log sources for onboarding and integration.
• Develop custom API connectors and parsers for non-standard log sources that lack out-of-the-box vendor support.
• Create robust use cases, develop custom SIEM detection rules, and implement MITRE ATT&CK modeling for threat detection.
• Troubleshoot day-to-day issues across log sources, collectors, agents, and other Security Operations Center (SOC) tools.
• Manage data archiving, backups, retention, and purging configurations to ensure compliance with standards, including data restoration as needed.
• Raise and manage change tickets for administrative tasks such as patch upgrades and log onboarding, and prepare assessment reports for existing platforms.
• Utilize foundational Windows and Unix administration skills to support infrastructure health.

Required Qualifications and Experience

• A minimum of 5 to 10 years of experience in SIEM administration or a related cybersecurity role.
• Demonstrated expertise in SIEM platform architecture, deployment, and maintenance.
• Proficiency in log source onboarding, integration, and classification.
• Experience in developing custom API connectors and parsers.
• Strong understanding of threat detection methodologies, including use case development and the MITRE ATT&CK framework.
• Solid troubleshooting skills for security tools and infrastructure components.
• Knowledge of data governance principles, including archiving, backup, and retention policies.
• Foundational administration skills in Windows and Unix operating systems.

Work Location and Type

This is a full-time position based in Riyadh, Saudi Arabia.

Application Information

Candidates who meet the above qualifications are encouraged to apply.