Cyber Defense Engineer- Incident Response & Threat Detection

Innovative Solutions SA; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Innovative Solutions is seeking a Defense Engineer - System Operator to monitor threats across company systems, detect incidents, and coordinate response actions. The role emphasizes continuous threat assessment, incident documentation, and escalation where needed.

The candidate should have 5+ years in security operations, CISSP/CASP+ and CCNA, with hands-on skills across SIEM, EDR/AV, IDS/IPS, firewalls, and vulnerability management.

Qualifications

• Minimum 5+ years in cybersecurity, security operations or related field.
• Requires CISSP or CASP+ and CCNA certificates.
• Strong knowledge of monitoring, threat detection, incident investigation and response.
• Hands-on with SIEM, EDR/AV, WAF, firewalls, NAC, proxy, HX, IDS/IPS, databases, endpoints.
• Ability to analyze alerts, assess risks and follow incident response procedures.
• Knowledge of vulnerability assessment and security controls.

Responsibilities

• Monitor cybersecurity systems and controls including EDR, SIEM, WAF, and firewall.
• Classify incidents by severity, initiate response actions and escalate as needed.
• Investigate incidents, document findings, and report through required channels.
• Prepare monthly reports on incidents, trends, and actions taken.
• Coordinate with departments during investigations and incident response.
• Develop and update security use cases for systems and apps.
• Perform regular security scans and ensure compliance with policies.

Skills

Cybersecurity Monitoring

Security Operations

Incident Response

Threat Analysis

Documentation skills

Communication

Coordination

Problem Solving

Education

CISSP or CASP+

CCNA

Tools

SIEM

EDR/AV

WAF

Firewalls

NAC

Proxy

HX

IDS/IPS

Databases

Endpoint security

Job description

Innovative Solutions is seeking a Defense Engineer - System Operator to monitor threats across company systems, detect incidents, and coordinate response actions. The role emphasizes continuous threat assessment, incident documentation, and escalation where needed.

The candidate should have 5+ years in security operations, CISSP/CASP+ and CCNA, with hands-on skills across SIEM, EDR/AV, IDS/IPS, firewalls, and vulnerability management.