4 days ago
Senior IT Security Operation- Saudi National- Riyadh, KSA
DeepSource Technologies · Riyadh, Riyadh Province, Saudi Arabia
WorkableApply on company site
Onsite
Senior
Role overview
The Senior IT Security Operations Engineer safeguards corporate IT infrastructure, networks, enterprise data, and cloud environments against operational security risks and threats. This hands-on role bridges infrastructure management with threat detection, incident response, IAM governance, and security standard compliance across enterprise systems.
Key Responsibilities
- Infrastructure & Network Defense: Configure, manage, and audit enterprise firewalls, VPNs, Endpoint Detection and Response (EDR) agents, and web proxy controls.
- Security Monitoring & Incident Response: Lead Tier-2/Tier-3 security event investigations, analyze SIEM logs, and mitigate security incidents to limit operational downtime.
- Identity & Access Governance: Enforce strict identity and access management (IAM) controls, privileged access management (PAM), multi-factor authentication, and role-based access policies.
- Vulnerability & Patch Management: Direct routine infrastructure vulnerability scans, prioritize critical patching schedules with IT infrastructure teams, and verify system hardening.
- Backup Integrity & System Audits: Ensure secure backup configurations, system disaster recovery readiness, and adherence to security standards (ITIL, ISO 27001, NCA-ECC).
Requirements
-
- Minimum 6+ years of hands-on experience in IT security administration, SOC engineering, or network security operations.
-
- Advanced proficiency with core security solutions including SIEM tools (Splunk, QRadar, Sentinel), EDR platforms (CrowdStrike, Defender), and Next-Gen Firewalls (Palo Alto, Fortinet) .
-
- Strong expertise in Identity & Access Management (Active Directory, Entra ID, PAM solutions) , multi-factor authentication, and network access controls.
-
- Proven track record in threat detection, incident response, log analysis, and system hardening across Windows/Linux servers and cloud platforms (Azure/AWS).
-
- Hold at least one active industry certification such as CompTIA Security+, CISSP, CEH, CCSP, or ITIL4 .
Responsibilities
1Infrastructure & Network Defense: Configure, manage, and audit enterprise firewalls, VPNs, Endpoint Detection and Response (EDR) agents, and web proxy controls.
2Security Monitoring & Incident Response: Lead Tier-2/Tier-3 security event investigations, analyze SIEM logs, and mitigate security incidents to limit operational downtime.
3Backup Integrity & System Audits: Ensure secure backup configurations, system disaster recovery readiness, and adherence to security standards (ITIL, ISO 27001, NCA-ECC).
4Key Responsibilities
5Requirements
61. Minimum 6+ years of hands-on experience in IT security administration, SOC engineering, or network security operations.
73. Strong expertise in Identity & Access Management (Active Directory, Entra ID, PAM solutions) , multi-factor authentication, and network access controls.
84. Proven track record in threat detection, incident response, log analysis, and system hardening across Windows/Linux servers and cloud platforms (Azure/AWS).
Requirements
11. Minimum 6+ years of hands-on experience in IT security administration, SOC engineering, or network security operations.
22. Advanced proficiency with core security solutions including SIEM tools (Splunk, QRadar, Sentinel), EDR platforms (CrowdStrike, Defender), and Next-Gen Firewalls (Palo Alto, Fortinet) .
33. Strong expertise in Identity & Access Management (Active Directory, Entra ID, PAM solutions) , multi-factor authentication, and network access controls.
44. Proven track record in threat detection, incident response, log analysis, and system hardening across Windows/Linux servers and cloud platforms (Azure/AWS).
55. Hold at least one active industry certification such as CompTIA Security+, CISSP, CEH, CCSP, or ITIL4 .
Skills and tags
SAAWSAzureAuditCompliance
