IT Cyber Security Engineer
Job Location: Riyadh, Saudi Arabia
To enhance our security operations, focusing on improving threat detection capabilities and ensuring a proactive security posture across both IT and OT environments. The ideal candidate will leverage Cisco advanced security tools and platforms, manage integrations, and lead incident response efforts to safeguard critical infrastructure and systems.
Key Responsibilities:
• Develop and enhance IT and OT Security Operations Centers (SOCs) to improve threat detection and response across the organization.
• Manage and optimize security platforms such as Cisco Splunk, Trend Micro, QRadar, EDR, and NDR for effective security monitoring and incident management.
• Integrate logs from multiple security platforms (e.g., WAF, Firewalls etc..) to enhance security monitoring and streamline incident response processes.
• Design and implement Splunk solutions, manage data sources, and respond to security incidents across IT and OT environments.
• Monitor and analyze traffic from critical infrastructure (e.g., substations, power plants) to detect anomalies and malicious activities.
• Evaluate emerging threats and new security technologies, providing recommendations to strengthen IT and OT security.
• Ensure compliance with industry regulations (e.g., NERC CIP, NIST, ISO) and coordinate with teams to enforce network security standards.
• Integrate external threat intelligence into SIEM systems, correlating events and identifying potential security threats.
• Develop playbooks within the SOAR platform to automate incident response actions and track key security metrics to measure and improve security operations.
Required Skills & Qualifications:
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
• Proven experience in IT and OT security with hands-on experience using tools such as Cisco Splunk, Trend Micro, QRadar, and others.
• Expertise in network security monitoring, incident response, and log integration across diverse IT and OT environments.
• Strong experience in responding to security incidents, conducting investigations, and mitigating risks across critical infrastructure.
• Familiarity with regulatory standards such as NERC CIP, NIST, ISO 27001, and IEC 62443.
• Strong verbal and written communication skills to collaborate with stakeholders and deliver management reports