Senior Specialist Cybersecurity Production
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
TAWANTECH is hiring a Senior Cybersecurity Production Specialist in Riyadh to provide end-to-end support for Splunk, SOAR, and VPN platforms. The role requires 4-8 years of experience in cybersecurity production support within banking or financial services, and knowledge of SAMA, NCA, and other regulatory frameworks.
Key Skills for This Role
Responsibilities
- Provide end to end production support for cybersecurity platforms including Splunk (SIEM), SOAR, and VPN infrastructure ensuring high availability and service reliability.
- Monitor security platforms, dashboards, and alerts to ensure continuous operational effectiveness and proactive issue detection.
- Manage Incident, Problem, and Change processes in accordance with ITIL standards, ensuring timely resolution and proper escalation.
- Perform root cause analysis (RCA) for system outages, performance degradation, and security incidents, ensuring corrective and preventive actions are implemented.
- Administer and support Splunk use cases, correlation rules, log ingestion pipelines, and performance optimization.
- Operate and maintain SOAR playbooks, workflows, and automation scripts to enhance incident response and reduce manual intervention.
- Support VPN technologies including secure remote access, site to site connectivity, authentication mechanisms, and encryption protocols.
- Ensure compliance with SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO data governance and classification requirements.
- Execute Disaster Recovery (DR) and Business Continuity Plan (BCP) activities including regular testing, failover validation, and documentation updates.
- Collaborate with internal security teams, infrastructure teams, and external vendors for issue resolution, patching, upgrades, and system enhancements.
- Maintain operational documentation including runbooks, SOPs, playbooks, system configurations, and knowledge base articles.
- Implement monitoring, alert tuning, and automation to improve detection accuracy, reduce false positives, and increase operational efficiency.
Requirements
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field
- 4 8 years of experience in cybersecurity production support within banking or financial services environments
- Hands on experience with Splunk (Enterprise / ES), SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR), and VPN solutions (e.g., IPSec, SSL VPN)
- Strong understanding of SIEM use cases, log management, threat detection, and incident response workflows
- Experience with ITIL processes including Incident, Problem, and Change Management
- Exposure to SAMA regulations, NCA ECC controls, PDPL, and NDMO data governance frameworks
- Experience working with vendors and managed service providers for cybersecurity tools and platforms
- Familiarity with DR/BCP planning, execution, and audit requirements
- Basic scripting or automation knowledge (Python, PowerShell, or similar) is preferred
Full Job Posting
Responsibilities
- Provide end to end production support for cybersecurity platforms including Splunk (SIEM), SOAR, and VPN infrastructure ensuring high availability and service reliability.
- Monitor security platforms, dashboards, and alerts to ensure continuous operational effectiveness and proactive issue detection.
- Manage Incident, Problem, and Change processes in accordance with ITIL standards, ensuring timely resolution and proper escalation.
- Perform root cause analysis (RCA) for system outages, performance degradation, and security incidents, ensuring corrective and preventive actions are implemented.
- Administer and support Splunk use cases, correlation rules, log ingestion pipelines, and performance optimization.
- Operate and maintain SOAR playbooks, workflows, and automation scripts to enhance incident response and reduce manual intervention.
- Support VPN technologies including secure remote access, site to site connectivity, authentication mechanisms, and encryption protocols.
- Ensure compliance with SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO data governance and classification requirements.
- Execute Disaster Recovery (DR) and Business Continuity Plan (BCP) activities including regular testing, failover validation, and documentation updates.
- Collaborate with internal security teams, infrastructure teams, and external vendors for issue resolution, patching, upgrades, and system enhancements.
- Maintain operational documentation including runbooks, SOPs, playbooks, system configurations, and knowledge base articles.
- Implement monitoring, alert tuning, and automation to improve detection accuracy, reduce false positives, and increase operational efficiency.
Requirements
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field
- 4 8 years of experience in cybersecurity production support within banking or financial services environments
- Hands on experience with Splunk (Enterprise / ES), SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR), and VPN solutions (e.g., IPSec, SSL VPN)
- Strong understanding of SIEM use cases, log management, threat detection, and incident response workflows
- Experience with ITIL processes including Incident, Problem, and Change Management
- Exposure to SAMA regulations, NCA ECC controls, PDPL, and NDMO data governance frameworks
- Experience working with vendors and managed service providers for cybersecurity tools and platforms
- Familiarity with DR/BCP planning, execution, and audit requirements
- Basic scripting or automation knowledge (Python, PowerShell, or similar) is preferred
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at TAWANTECH
Infrastructure Administrator
Riyadh, KSA
Support installation, configuration, and maintenance of infrastructure agents across Linux and Windows environments ensuring standardization and security compliance Perform syst...
Senior Network Administrator
Riyadh, KSA
Design, implement, and operate secure network infrastructure to support SOC monitoring, detection, and response requirements across bank environments. Ensure end-to-end connecti...
Senior Specialist Cybersecurity Production
Saudi Arabia, KSA
Provide end-to-end production support for cybersecurity platforms including Splunk (SIEM), SOAR, and VPN infrastructure ensuring high availability and service reliability. Monit...
Senior Network Administrator
Riyadh, KSA
TAWANTECH seeks a Senior Network Administrator to design, implement, and operate secure network infrastructure for SOC monitoring in banking environments. The role requires 5-8 years of network administration experience
Infrastructure Administrator
Riyadh, KSA
TAWANTECH seeks an Infrastructure Administrator to support installation, configuration, and maintenance of infrastructure agents across Linux and Windows environments. The role involves system administration, compliance
Senior Network Administrator
الرياض, KSA
TAWANTECH seeks a Senior Network Administrator to design, implement, and operate secure network infrastructure for SOC monitoring in banking environments. The role requires 5-8 years of experience with Cisco, Palo Alto,
Senior Specialist Cybersecurity Production
الرياض, KSA
TAWANTECH seeks a Senior Cybersecurity Production Specialist to provide end-to-end production support for cybersecurity platforms including Splunk, SOAR, and VPN infrastructure. The role requires 4-8 years of experience
Infrastructure Administrator
الرياض, KSA
The Infrastructure Administrator supports installation, configuration, and maintenance of infrastructure agents across Linux and Windows environments. The role ensures compliance with SAMA, NCA, PDPL, and NDMO cybersecur
Infrastructure Administrator
Riyadh, KSA
Senior Network Administrator
Riyadh, KSA
Senior Specialist Cybersecurity Production
Saudi Arabia, KSA
Senior Network Administrator
Riyadh, KSA
Infrastructure Administrator
Riyadh, KSA
Senior Network Administrator
الرياض, KSA
Senior Specialist Cybersecurity Production
الرياض, KSA
Infrastructure Administrator
الرياض, KSA