Cyberani تعلن عن وظيفة مهندس رئيسي MSS في الرياض

The Principle Lead Engineer provides visionary, and guidance on security telemetry collection strategy, data engineering, and MDR service evolution. Acting as a senior subject‑matter expert, the Advisor shapes client security architectures, and mentors team members and handle client's escalation. Supervise projects and ensure optimization is considered to provide efficient MDR service.

Responsibilities:

Strategic Thought Leadership

• Define the long‑term vision for log‑data acquisition, normalization, and analytics across all service lines.

• Publish whitepapers, best‑practice guides, and thought‑leadership content for internal and external audiences.

Enterprise Architecture & Governance

• Architect enterprise‑scale telemetry frameworks that span on‑premise, cloud, and OT environments.

Advisory & Client Engagement

• Serve as the senior technical advisor for strategic customers, presenting roadmap recommendations and risk assessments.

• Conduct executive‑level workshops and security posture reviews for tiering, identifying clients’ risks and delivering actionable recommendations.

• Evaluate and recommend emerging technologies (e.g., graph analytics, zero‑trust telemetry).

Performance & Quality Excellence

• Define KPIs for ingestion latency, data fidelity, and detection efficacy.

• Champion the implementation of automated quality gates and continuous improvement loops.

• Handle and train the team members for complex MDR integration tasks.

• Define operation standards, plans, guidelines and ensure team is in compliance with the defined procedure.

• Automate and optimize onboarding tasks

Requirements:

Bachelor’s degree in computer science, Cybersecurity, Information Systems, or a related field

8+ years of experience with SIEM platforms, log engineering, and security operations.

Nature of Experience:

• Deep knowledge of SIEM architectures (e.g., Splunk, QRadar, Elastic, Azure Sentinel).

• Mastery of log formats, protocols, and data models (CEF, JSON, Syslog, OpenTelemetry).

• Advanced scripting/programming (Python, PowerShell, Bash, Go) and automation tools (Ansible, Terraform, Jenkins).

• Experience with containerization (Docker/Kubernetes) and cloud platforms (AWS, Azure, GCP).

Skills:

• Strong analytical, troubleshooting, and communication skills

• Ability to manage priorities and work cross-functionally in a fast-paced environment

• CISSP, CISM, or equivalent. • Vendor-specific SIEM certifications (e.g., Splunk Certified Architect).

• Cloud security certifications (CCSP, AWS Security Specialty)