Senior Specialist Cybersecurity Production Support 🇸🇦📣 Job Ad

About the Role

TAWANTECH is seeking a Senior Specialist - Cybersecurity Production Support to join our team in Saudi Arabia. This full-time role is critical for ensuring the high availability, operational stability, and effective security monitoring of our enterprise cybersecurity platforms. The ideal candidate will have 4 to 8 years of experience in cybersecurity production support within enterprise or financial environments.

Key Responsibilities

• Provide production support for cybersecurity platforms, including SIEM, SOAR, VPN, and security monitoring solutions.
• Monitor cybersecurity platforms, dashboards, alerts, and operational activities to ensure continuous security.
• Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization.
• Manage and maintain SOAR workflows, playbooks, and automation processes.
• Support VPN infrastructure, covering secure remote access and site-to-site connectivity.
• Perform Incident, Problem, and Change Management activities in adherence to ITIL practices.
• Conduct Root Cause Analysis (RCA) for security incidents and platform-related issues.
• Support Cyber Incident Response activities, including investigation and remediation efforts.
• Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP) initiatives.
• Maintain comprehensive security documentation, runbooks, Standard Operating Procedures (SOPs), and operational reports.
• Collaborate effectively with security teams, infrastructure teams, and external vendors for issue resolution.

Required Technical Experience

Candidates must possess hands-on experience with the following cybersecurity technologies and platforms:

• SIEM platforms: Experience with Splunk Enterprise / Splunk ES is preferred.
• SOAR platforms: Such as Cortex XSOAR, Splunk SOAR, or similar solutions.
• VPN technologies: Including IPSec / SSL VPN.
• Security monitoring and incident response: Practical experience in these areas.

Essential Qualifications

• Strong understanding of cybersecurity operations, threat detection, and log analysis principles.
• Demonstrated experience with ITIL Incident, Problem, and Change Management processes.

Preferred Skills and Knowledge

• Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is highly advantageous.
• Basic scripting knowledge in languages such as Python, PowerShell, or similar.

Application Information

We invite qualified candidates to apply for this full-time position in Saudi Arabia.