SIEM Security Operations Engineer (Saudi Nationals)📣 Job Ad

About the Role

Socium - Teams Done Differently is seeking experienced SIEM Security Operations Engineers to join their team in Riyadh, Saudi Arabia. This contract role is specifically for Saudi Nationals and requires 2-5 years of relevant experience in cybersecurity operations. The primary focus of this position is to support enterprise cybersecurity monitoring, threat detection, incident analysis, and vulnerability management within a highly secure cloud environment.

Role Context and Purpose

The successful candidates will play a key role in the deployment and ongoing operation of the organization's Security Information and Event Management (SIEM) platform. This involves integrating various security products, actively monitoring security events, investigating alerts, and coordinating vulnerability remediation activities across both cloud services and enterprise infrastructure. This position is designed for cybersecurity professionals who are dedicated to strengthening enterprise cyber resilience through hands-on SIEM operations and security monitoring.

Key Responsibilities

• Assist in the deployment, configuration, and ongoing operation of the enterprise SIEM platform.
• Integrate security logs from enterprise security solutions, including WAF, HIDS, DDoS protection systems, cloud platforms, and other security technologies.
• Configure and optimize SIEM correlation rules, alert logic, dashboards, and detection use cases.
• Monitor security events, investigate alerts, and perform initial triage of potential security incidents.
• Analyze logs to identify suspicious activities, indicators of compromise (IOCs), and emerging security threats.
• Escalate validated security incidents to the appropriate cybersecurity or engineering teams for remediation.
• Manage and track security vulnerability tickets for cloud services and enterprise platforms.
• Validate reported vulnerabilities, coordinate remediation with engineering teams, and perform post-remediation verification.
• Assist in improving detection capabilities by tuning alert rules and reducing false positives.
• Support security compliance initiatives and maintain operational documentation.
• Conduct technical demonstrations and explain cybersecurity solutions during regulatory reviews, audits, or customer engagements.
• Collaborate with cloud, infrastructure, application, and security teams to continuously improve enterprise security posture.
• Stay updated with emerging cyber threats, attack techniques, and security best practices.

Required Experience and Qualifications

Candidates should possess 2-5 years of hands-on experience in SIEM operations and Security Operations Center (SOC) environments. Essential skills include proficiency in log analysis, security monitoring, and vulnerability management. A strong understanding of enterprise cyber resilience principles is also expected for this role.

Collaboration and Environment

This contract position is based in Riyadh, Saudi Arabia, and involves working within a highly secure cloud environment. The role requires close collaboration with cybersecurity engineers, cloud teams, product development teams, and regulatory stakeholders to enhance security monitoring capabilities and ensure timely incident response.

Application Information

Qualified Saudi Nationals with the specified experience and skills are encouraged to apply for this SIEM Security Operations Engineer role.