Cyber Defense Specialist - Detection & Monitoring

Location and Engagement

• The role is on-site in Riyadh, Saudi Arabia.
• The engagement is project-based managed cybersecurity services for a 13-month RFP term.

Role Purpose

Key Responsibilities

• Develop and enhance security detection capabilities across SIEM, SOAR, EDR, DLP, and email security platforms.
• Design correlation logic, detection rules, threat-detection use cases, alerts, and supporting response workflows.
• Integrate telemetry and logs from security systems to improve monitoring coverage.
• Continuously tune detections to improve accuracy and reduce false positives.
• Analyze security events and suspicious activity and escalate validated threats through approved processes.
• Maintain SOC policies, procedures, workflows, and operational playbooks.
• Map detection coverage to MITRE ATT&CK and coordinate improvements with cybersecurity, governance, and technical teams.
• Support security assessments, regulatory compliance, reporting, and security-vendor coordination.

Technical and Professional Requirements

• A bachelor's degree in Computer Science, Information Security, or a related field.
• At least 7 years of experience in SOC operations or cyber defense.
• Hands-on experience with SIEM, SOAR, EDR, DLP, email security gateways, and log or telemetry integration.
• Proven experience developing detection use cases and tuning security rules.
• Knowledge of cyberattack techniques, threat detection, MITRE ATT&CK, NCA requirements, and SOC operating models.

Personal Requirements

• Strong analytical and problem-solving skills.
• Clear communication, documentation, and cross-team coordination skills.
• Persistence, quality focus, and comfort working with vendors and technical partners.
• Ability to prioritize alerts and improvements in a high-volume operational environment.

Preferred Certifications

• CISSP, GCIA, GSEC, GCIH, CISM, or an equivalent certification is preferred.