وظيفة مهندس عمليات الأمن السيبراني شاغرة لدى CONNECT Professional Services في الرياض

Job Summary:

The Cybersecurity Operations Engineer is responsible for monitoring, detecting, and responding to cybersecurity threats while maintaining the organization's security controls across networks, systems, endpoints, cloud platforms, and applications. The role supports incident response, vulnerability management, and the day-to-day operation of cybersecurity technologies to ensure a secure and resilient IT environment.

Key Responsibilities:

·     Monitor, analyze, and investigate cybersecurity alerts, events, and incidents using security monitoring tools.

·     Perform incident triage, containment, eradication, recovery, and escalation in accordance with incident response procedures.

·     Support the daily operation of endpoint, network, cloud, and email security solutions.

·     Execute security monitoring activities and continuously improve detection use cases.

·     Coordinate vulnerability remediation with infrastructure, application, and cloud teams and validate remediation activities.

·     Support security patch management, technology upgrades, and infrastructure refresh projects to minimize security risks.

·     Participate in system migrations by validating security controls, reviewing configurations, and conducting post-implementation security checks.

·     Review and validate integrations between security platforms, enterprise systems, cloud services, and third-party technologies.

·     Support Identity and Access Management (IAM) activities, including privileged access monitoring and periodic access reviews.

·     Maintain incident response documentation, operational procedures, and security runbooks.

·     Track remediation activities and ensure timely resolution of identified security findings.

·     Recommend improvements to security monitoring, automation, and operational processes.

·     Collaborate with cross-functional teams to ensure security best practices are embedded into daily operations.

·     Prepare operational reports and provide regular updates on cybersecurity incidents and remediation efforts.

Qualifications:

·     Bachelor's degree in Computer Science, Information Security, Information Technology, Cybersecurity, or a related field.

·     Minimum of 5 years of experience in Cybersecurity Operations, SOC, or Information Security.

·     Experience working in enterprise IT environments.

·     One or more of the following certifications is preferred:

·     CCNA Security

·     CCNP Security

·     CISSP

·     CISM

·     Certified Ethical Hacker (CEH)

·     Security+ or equivalent cybersecurity certifications

·     Hands-on experience with:

·     Firewalls

·     Network Access Control (NAC)

·     Web Application Firewalls (WAF)

·     Endpoint Detection & Response (EDR/XDR)

·     Email Security Solutions

·     SIEM platforms

·     Vulnerability Management tools

·     Knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM).

·     Familiarity with cloud security concepts (Azure, AWS, or Google Cloud).

·     Strong understanding of networking, operating systems, and security best practices.

·     Knowledge of cybersecurity frameworks such as NIST, ISO 27001, or CIS Controls.

·     Saudi National is preferred.

·     Strong analytical and troubleshooting skills.

·     Excellent communication and stakeholder management abilities.

·     Ability to work effectively under pressure and respond to security incidents.

·     Self-motivated, detail-oriented, and committed to continuous learning.