SIEM Security Operations Engineer (Saudi Nationals)

About the Role

Socium - Teams Done Differently is seeking experienced SIEM Security Operations Engineers for a contract position in Riyadh, Saudi Arabia. This role focuses on supporting enterprise cybersecurity monitoring, threat detection, incident analysis, and vulnerability management within a highly secure cloud environment. The successful candidates will be instrumental in deploying and operating the organization's Security Information and Event Management (SIEM) platform, integrating security products, monitoring events, investigating alerts, and coordinating vulnerability remediation across cloud services and enterprise infrastructure.

Role Context and Collaboration

This position is suited for cybersecurity professionals with 2-5 years of hands-on experience in SIEM operations, Security Operations Center (SOC) environments, log analysis, security monitoring, and vulnerability management. The role involves close collaboration with cybersecurity engineers, cloud teams, product development teams, and regulatory stakeholders to enhance security monitoring capabilities, improve threat detection, and ensure timely response to security incidents.

Key Responsibilities

• Assist in the deployment, configuration, and ongoing operation of the enterprise SIEM platform.
• Integrate security logs from enterprise security solutions, including WAF, HIDS, DDoS protection systems, cloud platforms, and other security technologies.
• Configure and optimize SIEM correlation rules, alert logic, dashboards, and detection use cases.
• Monitor security events, investigate alerts, and perform initial triage of potential security incidents.
• Analyze logs to identify suspicious activities, indicators of compromise (IOCs), and emerging security threats.
• Escalate validated security incidents to the appropriate cybersecurity or engineering teams for remediation.
• Manage and track security vulnerability tickets for cloud services and enterprise platforms.
• Validate reported vulnerabilities, coordinate remediation with engineering teams, and perform post-remediation verification.
• Assist in improving detection capabilities by tuning alert rules and reducing false positives.
• Support security compliance initiatives and maintain operational documentation.
• Conduct technical demonstrations and explain cybersecurity solutions during regulatory reviews, audits, or customer engagements.
• Collaborate with cloud, infrastructure, application, and security teams to continuously improve enterprise security posture.
• Stay up to date with emerging cyber threats, attack techniques, and security best practices.

Required Experience

• 2-5 years of experience in SIEM operations, SOC environments, log analysis, security monitoring, and vulnerability management.
• Demonstrated experience in deploying and operating SIEM platforms.
• Experience with integrating security logs from various enterprise security solutions.
• Proficiency in configuring and optimizing SIEM correlation rules, alert logic, dashboards, and detection use cases.

Work Environment

This is a contract position based in Riyadh, Saudi Arabia, focusing on supporting a highly secure cloud environment. The role requires active participation in a team dedicated to strengthening enterprise cyber resilience.