Back to jobsSign in and upload your CV to see how well you match this job.
Sign inJob overview
- Location
- Riyadh, Saudi Arabia
- Workplace
- On-site
- Experience level
- Senior
- Date posted
- Sep 29, 2026
- Last checked at the source
- Oct 7, 2026
- Job source
- via Workable
Responsibilities
• Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions.
• Monitor cybersecurity platforms, dashboards, alerts, and operational activities.
• Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization.
• Manage and maintain SOAR workflows, playbooks, and automation processes.
• Support VPN infrastructure including secure remote access and site-to-site connectivity.
• Perform Incident, Problem, and Change Management activities following ITIL practices.
• Conduct Root Cause Analysis (RCA) for security incidents and platform issues.
• Support Cyber Incident Response activities including investigation and remediation.
• Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP).
• Maintain security documentation, runbooks, SOPs, and operational reports.
• Collaborate with security teams, infrastructure teams, and vendors for issue resolution.
Requirements
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
• 4–8 years of experience in cybersecurity production support within enterprise or financial environments.
• Hands-on experience with:
• SIEM platforms (Splunk Enterprise / Splunk ES preferred)
• SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
• VPN technologies (IPSec / SSL VPN)
• Security monitoring and incident response
• Strong understanding of cybersecurity operations, threat detection, and log analysis.
• Experience with ITIL Incident, Problem, and Change Management.
• Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is preferred.
• Basic scripting knowledge (Python, PowerShell, or similar) is preferred.
Skills
- Python
- Bash
- Cybersecurity
- Operations
Visa and relocation
?The posting doesn't mention visa sponsorship. Check the original posting or ask the company.
?The posting doesn't mention relocation.
Job description
Senior Specialist – Cybersecurity Production Support – Saudi Arabia 🇸🇦
We are looking for a Senior Specialist – Cybersecurity Production Support to join our team in Saudi Arabia.
Job Overview:
The Senior Specialist will be responsible for supporting and maintaining cybersecurity platforms, ensuring high availability, operational stability, and effective security monitoring across enterprise environments.
Key Responsibilities:
• Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions.
• Monitor cybersecurity platforms, dashboards, alerts, and operational activities.
• Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization.
• Manage and maintain SOAR workflows, playbooks, and automation processes.
• Support VPN infrastructure including secure remote access and site-to-site connectivity.
• Perform Incident, Problem, and Change Management activities following ITIL practices.
• Conduct Root Cause Analysis (RCA) for security incidents and platform issues.
• Support Cyber Incident Response activities including investigation and remediation.
• Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP).
• Maintain security documentation, runbooks, SOPs, and operational reports.
• Collaborate with security teams, infrastructure teams, and vendors for issue resolution.
Requirements:
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
• 4–8 years of experience in cybersecurity production support within enterprise or financial environments.
• Hands-on experience with:
• SIEM platforms (Splunk Enterprise / Splunk ES preferred)
• SOAR platforms (Cortex XSOAR, Splunk SOAR, or similar)
• VPN technologies (IPSec / SSL VPN)
• Security monitoring and incident response
• Strong understanding of cybersecurity operations, threat detection, and log analysis.
• Experience with ITIL Incident, Problem, and Change Management.
• Knowledge of SAMA Cybersecurity Framework, NCA ECC, PDPL, and NDMO is preferred.
• Basic scripting knowledge (Python, PowerShell, or similar) is preferred.
GetGlobalJob is not the employer or a recruiting agency. You apply on the original publisher's site: always check the posting before sharing your details, and never pay for a job.
Check your fit for this job
Create your free account and upload your CV to see how well you match this job and which skills you're missing.
Check my fit