Senior Specialist Cybersecurity Production Support 🇸🇦📣 Job Ad

About the Role

Integrated Solutions Tawantech is seeking a Senior Specialist - Cybersecurity Production Support to join our team in Saudi Arabia. This full-time role focuses on ensuring the high availability, operational stability, and effective security monitoring of cybersecurity platforms across enterprise environments.

Key Responsibilities

• Provide production support for cybersecurity platforms, including SIEM, SOAR, VPN, and various security monitoring solutions.
• Monitor cybersecurity platforms, dashboards, alerts, and operational activities to ensure continuous security.
• Support Splunk SIEM use cases, manage log ingestion, develop correlation rules, and optimize performance.
• Manage and maintain SOAR workflows, playbooks, and automation processes to enhance incident response capabilities.
• Support VPN infrastructure, covering secure remote access and site-to-site connectivity.
• Perform Incident, Problem, and Change Management activities in adherence to ITIL practices.
• Conduct Root Cause Analysis (RCA) for security incidents and platform-related issues.
• Support Cyber Incident Response activities, including investigation and remediation efforts.
• Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP) initiatives.
• Maintain comprehensive security documentation, runbooks, Standard Operating Procedures (SOPs), and operational reports.
• Collaborate with security teams, infrastructure teams, and external vendors for efficient issue resolution.

Required Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• 4–8 years of experience in cybersecurity production support, preferably within enterprise or financial environments.
• Hands-on experience with:
  • SIEM platforms (Splunk Enterprise / Splunk ES preferred)
  • SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
  • VPN technologies (IPSec / SSL VPN)
  • Security monitoring and incident response processes
• Experience with ITIL Incident, Problem, and Change Management practices.

Technical Skills and Knowledge

• Strong understanding of cybersecurity operations, threat detection methodologies, and log analysis.
• Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is preferred.
• Basic scripting knowledge (Python, PowerShell, or similar) is preferred.

Work Environment

This is a full-time position based in Saudi Arabia, requiring a dedicated professional to contribute to the cybersecurity posture of enterprise environments.

Application Information

We invite qualified candidates to apply for this role. Salary details will be discussed during the interview process.