Defense Engineer - System Operator (RE)

Innovative Solutions SA; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Innovative Solutions is seeking a Defense Engineer - System Operator to monitor threats across company systems, detect incidents, and coordinate response actions. The role emphasizes continuous threat assessment, incident documentation, and escalation where needed.

The candidate should have 5+ years in security operations, CISSP/CASP+ and CCNA, with hands-on skills across SIEM, EDR/AV, IDS/IPS, firewalls, and vulnerability management.

Qualifications

• Minimum 5+ years in cybersecurity, security operations or related field.
• Requires CISSP or CASP+ and CCNA certificates.
• Strong knowledge of monitoring, threat detection, incident investigation and response.
• Hands-on with SIEM, EDR/AV, WAF, firewalls, NAC, proxy, HX, IDS/IPS, databases, endpoints.
• Ability to analyze alerts, assess risks and follow incident response procedures.
• Knowledge of vulnerability assessment and security controls.

Responsibilities

• Monitor cybersecurity systems and controls including EDR, SIEM, WAF, and firewall.
• Classify incidents by severity, initiate response actions and escalate as needed.
• Investigate incidents, document findings, and report through required channels.
• Prepare monthly reports on incidents, trends, and actions taken.
• Coordinate with departments during investigations and incident response.
• Develop and update security use cases for systems and apps.
• Perform regular security scans and ensure compliance with policies.

Skills

Cybersecurity Monitoring

Security Operations

Incident Response

Threat Analysis

Documentation skills

Communication

Coordination

Problem Solving

Education

CISSP or CASP+

CCNA

Tools

SIEM

EDR/AV

WAF

Firewalls

NAC

Proxy

HX

IDS/IPS

Databases

Endpoint security

Job description

Company Overview

Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.

Our mission is "Delivering secure and intelligent digital services that empower organizations"

Role Summary

The Defense Engineer - System Operator (RE) is responsible for continuously monitoring cybersecurity threats and security incidents across the company's systems. The role focuses on detecting, analyzing, documenting, and responding to cybersecurity incidents while maintaining the security and integrity of the company's systems and information.

Key Responsibilities

• Monitor and manage cybersecurity systems and security controls, including EDR, AV, SIEM, WAF, Firewall, NAC, Proxy, and HX
• Continuously monitor security alerts and events, classify incidents based on severity and impact, and take appropriate action
• Assess security incidents and follow established incident response procedures, including:
  • Notifying relevant system owners
  • Initiating appropriate incident response actions
  • Escalating incidents according to defined procedures
  • Documenting incident details, findings, and actions taken
• Investigate cybersecurity incidents and cyberattacks and analyze relevant security events and indicators
• Document, track, and report cybersecurity incidents in accordance with established procedures
• Handle and follow up on users' Service Requests related to information security
• Create, develop, and update security use cases for existing and newly implemented security systems and applications
• Analyze cybersecurity incidents and security events and report them through the Saudi Cybersecurity Authority channels, where applicable
• Conduct regular security scans to identify vulnerabilities, security gaps, and potential threats
• Ensure compliance with applicable cybersecurity standards, policies, and requirements approved by the Information Technology Administration
• Coordinate with relevant departments and system owners during cybersecurity investigations and incident response activities
• Prepare monthly reports summarizing major cybersecurity incidents, findings, trends, and actions taken
• Maintain and operate security systems and ensure they are updated to the latest approved versions
• Identify, classify, and prioritize security events and incidents collected through security controls, including firewalls, network and proxy devices, IDS/IPS systems, antivirus solutions, databases, and endpoints
• Support the continuous improvement of security monitoring, incident detection, and response processes
• Perform other cybersecurity monitoring, investigation, and incident response duties as assigned

Qualifications & Experience

• Minimum Experience: 5+ years of relevant experience in cybersecurity, security operations, or a related field
• Required Certifications: CISSP or CASP+ and CCNA
• Strong knowledge of cybersecurity monitoring, threat detection, incident investigation, and incident response
• Hands-on experience with security monitoring and protection technologies, including SIEM, EDR/AV, WAF, Firewalls, NAC, Proxy, HX, IDS/IPS, databases, and endpoint security solutions
• Ability to analyze security alerts and events, assess risks, prioritize incidents, and follow established incident response procedures
• Knowledge of vulnerability assessment, security scanning, and cybersecurity controls
• Strong analytical, problem-solving, documentation, reporting, communication, and coordination skills

Core Competencies

• Cybersecurity Monitoring
• Security Operations
• Security Incident Response
• Threat Detection and Analysis
• Security Information and Event Management (SIEM)
• Vulnerability Assessment and Security Scanning
• Cybersecurity Investigation
• Incident Documentation and Reporting
• Risk Assessment and Incident ClassificationSecurity Controls Management
• Cross-functional Communication