Cyber Security Defense Senior Specialist

شركة الفلك للمعدات والتجهيزات الإلكترونية; Jeddah; On-site; SAR 180,000 - 290,000; Full time

Job summary

شركة الفلك للمعدات والتجهيزات الإلكترونية seeks a skilled Cybersecurity Specialist to lead penetration testing, threat intelligence, and SOC monitoring. You will design methodologies, perform vulnerability assessments, and coordinate red team activities to strengthen security posture.

Ideal candidates have a strong background in SIEM, log analysis, incident response, and mitigating complex threats in enterprise environments. Collaboration with IT and security teams is required.

Qualifications

• Bachelor's degree in CS or IT and relevant security certifications.
• Experience with security assessment tools and vulnerability management.
• Experience in penetration testing and threat hunting activities.
• Knowledge of SIEM solutions and log formats for investigation.
• Proficiency with log search tools and data aggregation.
• Strong incident handling and forensics understanding.

Responsibilities

• Develop, review and update penetration testing methodologies and ensure coverage.
• Conduct threat modelling and vulnerability assessments with remediation recommendations.
• Coordinate penetration testing, code reviews, security testing and red teaming.
• Lead vulnerability scanning and reporting, monitor remediation with IT.
• Maintain vulnerability management KPIs and coordinate with IT security.
• Oversee threat intelligence activities and triage advanced threats.
• Monitor SOC operations, incident management and forensics investigations.
• Ensure SIEM health and coordinate with outsourced vendors on SLAs and KPIs.

Skills

Security assessment tools

Vulnerability management

Penetration testing

SIEM solutions

Log parsing and analysis

Log search tools

Threat intelligence

Incident handling

Education

Bachelor’s degree in Computer Science or Information Technology

GCIH, CTIA, CDFE, Offensive Security Certified Professional, CEH, OSWA certifications

Tools

Vulnerability scanners

Threat intelligence tools

SIEM platforms

Job description

Key Responsibilities:

• Develop, review and update penetration testing methodologies, ensuring comprehensive coverage and adherence to industry best practices.
• Conduct threat modelling and vulnerability assessments to identify potential weaknesses in infrastructure, applications, and systems and provide recommendations for remediation.
• Coordinate penetration testing, source code review, application security testing, and red teaming activities.
• Responsible for vulnerability scanning activities on systems and assets, Vulnerability scanners health and deployment across the different segments of network, configuration review, and all associated activities related to vulnerability management preparation of vulnerability reports to IT.
• Follow-up on vulnerability remediation status and actions taken in coordination with IT department.
• Maintain vulnerability management KPI and follow up remediation with IT security for identified vulnerabilities.

Threat Hunting and Threat Management

• Responsible for threat intelligence activities, and coordination of threat hunting activities.
• Manage compromise assessment, Yara scanning, and sigma scanning activities to identify and address potential breaches and preparation of reports for IT actions accordingly.
• Triage and resolve advanced vector attacks such as botnets and advanced persistent threats (APTs).
• Gather and analyze threat intelligence from internal and external sources.
• Follow updates on threats posted or received from relevant authorities and ensure these updates are reflected on IT systems as applicable.
• Monitor external data sources to keep understanding of emerging cybersecurity threats and determine which security issues may have an impact on the organization.

SOC monitoring & Cyber incident management

• Responsible for the monitoring and investigation of Cybersecurity events and incidents and act as first responder forensics analysis and investigation.
• Maintain an incident repository for organization incidents with different incident classifications.
• Correlate incident data to identify vulnerabilities and help in coordinating a mitigation for these vulnerabilities that might impact the company.
• Use knowledge of threat actors and activities to prepare organization's response to a cyber incident.
• Implement the containment strategy during data loss or breach events.
• Analyse malicious activity to determine vulnerabilities exploited, exploitation methods and effects on system and information.
• Responsible to work with the SOC all raised cyber security incidents.
• Implement the event management processes.
• Responsible for onboarding the new assets to extend SOC monitoring over them.
• Responsible for the SIEM health status and coordinating any required activity related to the SIEM with the outsourced vendor.
• Provide use case creation/tuning recommendations to administrators based on findings during investigations or threat reviews.
• Monitor the performance on all outsourced functions to SOC to ensure vendor conformance to agreed SLAs and KPIs.

QUALIFICATIONS:

• Bachelor’s degree in computer science, Information Technology
• Experience with Security Assessment tools
• Experience in Vulnerability management and Penetration testing
• Knowledge of SIEM solutions
• Knowledge of log formats and ability to aggregate and parse log data for syslog, http logs, DB logs for investigation purposes.
• In-depth experience with log search tools
• Relevant professional certificates in Certified Incident Handler (GCIH), Certified Threat Intelligence Analyst (CTIA), Certified Digital Forensics Examiner (CDFE), Offensive
• Security Certified Professional, Certified Ethical Hacker (CEH), and Certified Web Assessor (OSWA) certification are highly desirable.