Applications closed on 14 Nov 2026
TAWANTECH is not accepting applications for this role right now. The original posting is kept below for reference.
TAWANTECH
Senior Specialist - Cybersecurity Production Support - Saudi Arabia 🇸🇦
🇸🇦 Riyadh, Saudi Arabia🏢 On-site
CybersecuritySIEMSOARSplunkVPNITILIncident Response
At a Glance
- Category
- 💻 Technology
- Level
- Senior
- Type
- Full-time
Check Your CV
- See if your CV layout works for TAWANTECH
- Get every weak line rewritten
- Download a CV written for the Gulf
Free check in 60 seconds. Fixes $5.88 one-time, only if you want them.
Senior Specialist – Cybersecurity Production Support – Saudi Arabia 🇸🇦
We are looking for a Senior Specialist – Cybersecurity Production Support to join our team in Saudi Arabia.
Job Overview:
The Senior Specialist will be responsible for supporting and maintaining cybersecurity platforms, ensuring high availability, operational stability, and effective security monitoring across enterprise environments.
Key Responsibilities:
- Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions.
- Monitor cybersecurity platforms, dashboards, alerts, and operational activities.
- Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization.
- Manage and maintain SOAR workflows, playbooks, and automation processes.
- Support VPN infrastructure including secure remote access and site-to-site connectivity.
- Perform Incident, Problem, and Change Management activities following ITIL practices.
- Conduct Root Cause Analysis (RCA) for security incidents and platform issues.
- Support Cyber Incident Response activities including investigation and remediation.
- Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP).
- Maintain security documentation, runbooks, SOPs, and operational reports.
- Collaborate with security teams, infrastructure teams, and vendors for issue resolution.Requirements:
- Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
- 4–8 years of experience in cybersecurity production support within enterprise or financial environments.
- Hands-on experience with:
- SIEM platforms (Splunk Enterprise / Splunk ES preferred)
- SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
- VPN technologies (IPSec / SSL VPN)
- Security monitoring and incident response
- Strong understanding of cybersecurity operations, threat detection, and log analysis.
- Experience with ITIL Incident, Problem, and Change Management.
- Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is preferred.
- Basic scripting knowledge (Python, PowerShell, or similar) is preferred.
Requirements
- •Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field
- •4–8 years of experience in cybersecurity production support within enterprise or financial environments
- •Hands-on experience with SIEM platforms (Splunk Enterprise / Splunk ES preferred)
- •Hands-on experience with SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
- •Experience with VPN technologies (IPSec / SSL VPN)
- •Experience with security monitoring and incident response
- •Strong understanding of cybersecurity operations, threat detection, and log analysis
- •Experience with ITIL Incident, Problem, and Change Management
Nice to Have
- •Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO
- •Basic scripting knowledge (Python, PowerShell, or similar)
Responsibilities
- •Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions
- •Monitor cybersecurity platforms, dashboards, alerts, and operational activities
- •Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization
- •Manage and maintain SOAR workflows, playbooks, and automation processes
- •Support VPN infrastructure including secure remote access and site-to-site connectivity
- •Perform Incident, Problem, and Change Management activities following ITIL practices
- •Conduct Root Cause Analysis (RCA) for security incidents and platform issues
- •Support Cyber Incident Response activities including investigation and remediation
Similar Open Jobs6 similar jobs
Browse Similar
Check Your CV
- See if your CV layout works for TAWANTECH
- Get every weak line rewritten
- Download a CV written for the Gulf
Free check in 60 seconds. Fixes $5.88 one-time, only if you want them.
GCC Info
Company
TAWANTECH offers technology solutions aimed at driving digital transformation for businesses. They provide services to help organizations innovate and grow.