Security Delivery Consultant

Location

• The job description lists Jeddah, Saudi Arabia.
• The stored source location lists Riyadh, Riyadh, Saudi Arabia.

Role overview

Responsibilities

• Develop and improve Cybersecurity Center processes, policies, incident response plans, SOC workflows, and operational runbooks.
• Develop, refine, and tune SIEM correlation rules to improve detection accuracy and reduce noise.
• Analyze security events and guide team members during investigations and active incidents.
• Administer EDR across Windows, macOS, and Linux, including deployment, upgrades, health monitoring, policies, and integrations.
• Administer NDR, develop policies and custom correlation rules, integrate it with SIEM, and review configurations.
• Manage EDR and NDR vendor support tickets and coordinate resolutions.
• Use IR tools across the full detection, investigation, and response lifecycle.
• Produce cyber intelligence reports for technical staff, business stakeholders, and senior management.
• Lead the cyber team day-to-day and provide on-call support outside business hours when required.

Required qualifications

• Proven experience in incident response planning and execution.
• Strong knowledge of SOC policy, process, and procedure design.
• Hands-on SIEM and correlation rule development experience.
• Practical EDR and NDR administration experience across multi-OS environments.
• Understanding of IR tools across detection, investigation, and response.
• Strong leadership skills and ability to guide and develop a cyber team.
• Excellent verbal and written communication skills for diverse audiences.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.

Preferred qualifications

• Experience integrating EDR and NDR with SIEM and broader security tooling ecosystems.
• Background producing executive-level cyber intelligence reporting.
• GIAC GCIH, GMON, GCFA, or equivalent certifications are strongly preferred.