Defense Engineer - System Operator (RE)

Innovative Solutions SA; Riyadh; On-site; SAR 200,000 - 320,000; Full time

Job summary

Innovative Solutions (IS) is seeking a Defense Engineer - System Operator (RE) to monitor cybersecurity threats and security incidents across the company’s systems. The role emphasizes detecting, analyzing, documenting, and responding to incidents while preserving system integrity.

Responsibilities include monitoring systems (EDR, SIEM, WAF, NAC, Proxy), classifying and escalating incidents, and maintaining compliance with internal procedures. A CISSP/CASP+ and CCNA are required.

Qualifications

• 5+ years in cybersecurity, security operations, or related field.
• CISSP or CASP+ and CCNA certifications.
• Strong knowledge of monitoring, threat detection, incident investigation and response.
• Hands-on with SIEM, EDR/AV, WAF, Firewalls, NAC, Proxy, HX, IDS/IPS.
• Ability to analyze alerts, assess risk, and follow incident procedures.

Responsibilities

• Monitor cybersecurity systems and controls (EDR, AV, SIEM, WAF, Firewall, NAC, Proxy, HX).
• Classify incidents by severity and take appropriate action.
• Follow incident response procedures and document actions taken.
• Investigate security incidents and analyze security events/indicators.
• Document, track, and report incidents per procedures.
• Coordinate with departments during investigations and incident response.

Skills

Cybersecurity Monitoring

Threat Detection

Incident Investigation

Incident Response

Security Analysis

Risk Assessment

Communication

Documentation

Tools

SIEM

EDR/AV

WAF

Firewalls

NAC

Proxy

IDS/IPS

HX

Job description

Company Overview

Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services. Our mission is "Delivering secure and intelligent digital services that empower organizations".

Role Summary

The Defense Engineer - System Operator (RE) is responsible for continuously monitoring cybersecurity threats and security incidents across the company's systems. The role focuses on detecting, analyzing, documenting, and responding to cybersecurity incidents while maintaining the security and integrity of the company's systems and information.

Key Responsibilities

• Monitor and manage cybersecurity systems and security controls, including EDR, AV, SIEM, WAF, Firewall, NAC, Proxy, and HX
• Continuously monitor security alerts and events, classify incidents based on severity and impact, and take appropriate action
• Assess security incidents and follow established incident response procedures, including:
  • Notifying relevant system owners
  • Initiating appropriate incident response actions
  • Escalating incidents according to defined procedures
  • Documenting incident details, findings, and actions taken
• Investigate cybersecurity incidents and cyberattacks and analyze relevant security events and indicators
• Document, track, and report cybersecurity incidents in accordance with established procedures
• Handle and follow up on users' Service Requests related to information security
• Create, develop, and update security use cases for existing and newly implemented security systems and applications
• Analyze cybersecurity incidents and security events and report them through the Saudi Cybersecurity Authority channels, where applicable
• Conduct regular security scans to identify vulnerabilities, security gaps, and potential threats
• Ensure compliance with applicable cybersecurity standards, policies, and requirements approved by the Information Technology Administration
• Coordinate with relevant departments and system owners during cybersecurity investigations and incident response activities
• Prepare monthly reports summarizing major cybersecurity incidents, findings, trends, and actions taken
• Maintain and operate security systems and ensure they are updated to the latest approved versions
• Identify, classify, and prioritize security events and incidents collected through security controls, including firewalls, network and proxy devices, IDS/IPS systems, antivirus solutions, databases, and endpoints
• Support the continuous improvement of security monitoring, incident detection, and response processes
• Perform other cybersecurity monitoring, investigation, and incident response duties as assigned

Qualifications & Experience

• Minimum Experience: 5+ years of relevant experience in cybersecurity, security operations, or a related field
• Required Certifications: CISSP or CASP+ and CCNA
• Strong knowledge of cybersecurity monitoring, threat detection, incident investigation, and incident response
• Hands-on experience with security monitoring and protection technologies, including SIEM, EDR/AV, WAF, Firewalls, NAC, Proxy, HX, IDS/IPS, databases, and endpoint security solutions
• Ability to analyze security alerts and events, assess risks, prioritize incidents, and follow established incident response procedures
• Knowledge of vulnerability assessment, security scanning, and cybersecurity controls
• Strong analytical, problem-solving, documentation, reporting, communication, and coordination skills

Core Competencies

• Cybersecurity Monitoring
• Security Operations
• Security Incident Response
• Threat Detection and Analysis
• Security Information and Event Management (SIEM)
• Vulnerability Assessment and Security Scanning
• Cybersecurity Investigation
• Incident Documentation and Reporting
• Risk Assessment and Incident Classification
• Security Controls Management
• Cross-functional Communication