Senior Security Operations Engineer

Tencent; As Sudiyah; On-site; OMR 9,200 - 13,000; Full time

Job summary

Tencent Cloud Middle East is seeking a Security Operations Specialist based in the Kingdom of Saudi Arabia. The role supports day-to-day cybersecurity activities, running established processes, monitoring events, maintaining compliance, and coordinating with central security teams.

This is an individual contributor role for someone early in their security career, with growth into cloud security operations and compliance in a fast-moving environment.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 3–5 years of hands-on experience in security operations, IT operations, data security, privacy or compliance support; internships and graduate programmes count.
• Working knowledge of common security operations tasks: alert monitoring, vulnerability management, access and entitlement review, log review, and incident documentation.
• Familiarity with cloud services and common security technologies (for example IAM, network security controls, encryption, SIEM, endpoint protection); exposure to any major cloud platform is a plus.
• Familiarity with information security and privacy standards and frameworks such as ISO 27001, NIST CSF or PCI DSS; experience supporting audits or certification activities is a plus.
• Basic awareness of information security and personal data protection requirements in Saudi Arabia (for example SAMA Cybersecurity Framework, PDPL, NCA controls) and a willingness to build deeper regulatory knowledge on the job.
• Clear written and verbal communication in English; Arabic is a plus.
• Detail-oriented, comfortable working with process, documentation and cross-team coordination. Entry-level certifications (Security+, CC, ISO 27001 Foundation) are a plus, not a requirement.

Responsibilities

• Execute and maintain the security operations processes, procedures and checklists defined by Tencent Cloud's security and compliance teams; track tasks and tickets through to closure.
• Monitor security alerts, vulnerabilities and risk items; perform initial triage, escalate to the appropriate owners, and keep risk and issue trackers accurate and up to date.
• Support incident response activities under guidance - collect and preserve evidence, maintain incident timelines, coordinate with responders, and draft incident reports and post-incident summaries.
• Assist with the periodic review and upkeep of cybersecurity and privacy policies, procedures, guidelines and compliance evidence, so that documentation stays current and audit-ready.
• Prepare regular operational reports and dashboards on security posture, open risks, remediation progress and compliance status for internal stakeholders.
• Support security awareness activities, internal communications, and the preparation of security documentation and questionnaire responses for customers and partners.

Skills

Alert monitoring

Vulnerability management

Access review

Incident documentation

Security operations

English communication

Regulatory awareness

Education

Bachelor's degree or equivalent practical experience

Tools

IAM

Network security controls

Encryption

SIEM

Endpoint protection

Job description

Business Unit

Cloud & Smart Industries Group (CSIG) is responsible for promoting the company's cloud and industry Internet strategy. CSIG explores the interactions between users and industries to create innovative solutions for smart industries via technological advancements such as cloud, AI, and network security. While driving the digitalization of retail, medical, education, transportation and other industries, CSIG helps companies serve users in smarter ways, building a new ecosystem of intelligent industries that connect users and businesses.

What the Role Entails

Job Summary

Tencent Cloud Middle East is looking for a Security Operations Specialist based in the Kingdom of Saudi Arabia. The role supports the day-to-day operation of Tencent Cloud Middle East's cybersecurity activities: running established security processes, monitoring and triaging security events, maintaining compliance documentation, and coordinating with Tencent Cloud's central security and compliance teams.

This is an individual-contributor role for a candidate in the early stage of their security career who wants to grow into cloud security operations and compliance. It does not carry people-management or strategy-ownership responsibilities.

Job Responsibilities

1. Execute and maintain the security operations processes, procedures and checklists defined by Tencent Cloud's security and compliance teams; track tasks and tickets through to closure.
2. Monitor security alerts, vulnerabilities and risk items; perform initial triage, escalates to the appropriate owners, and keep risk and issue trackers accurate and up to date.
3. Support incident response activities under guidance - collect and preserve evidence, maintain incident timelines, coordinate with responders, and draft incident reports and post-incident summaries.
4. Assist with the periodic review and upkeep of cybersecurity and privacy policies, procedures, guidelines and compliance evidence, so that documentation stays current and audit-ready.
5. Prepare regular operational reports and dashboards on security posture, open risks, remediation progress and compliance status for internal stakeholders.
6. Support security awareness activities, internal communications, and the preparation of security documentation and questionnaire responses for customers and partners.

Who We Look For

1. Bachelor's degree, or equivalent practical experience.
2. 3-5 years of hands-on experience in security operations, IT operations, data security, privacy or compliance support; internships and graduate programmes count.
3. Working knowledge of common security operations tasks: alert monitoring, vulnerability management, access and entitlement review, log review, and incident documentation.
4. Familiarity with cloud services and common security technologies (for example IAM, network security controls, encryption, SIEM, endpoint protection); exposure to any major cloud platform is a plus.
5. Familiarity with information security and privacy standards and frameworks such as ISO 27001, NIST CSF or PCI DSS; experience supporting audits or certification activities is a plus.
6. Basic awareness of information security and personal data protection requirements in Saudi Arabia (for example SAMA Cybersecurity Framework, PDPL, NCA controls) and a willingness to build deeper regulatory knowledge on the job.
7. Clear written and verbal communication in English; Arabic is a plus.
8. Detail-oriented, comfortable working with process, documentation and cross-team coordination. Entry-level certifications (Security+, CC, ISO 27001 Foundation) are a plus, not a requirement.

Equal Employment Opportunity at Tencent

As an equal opportunity employer, we firmly believe that diverse voices fuel our innovation and allow us to better serve our users and the community. We foster an environment where every employee of Tencent feels supported and inspired to achieve individual and common goals.