MSS Engineering Advisor

Cyberani by aramco digital; Riyadh; On-site; SAR 260,000 - 360,000; Full time

Job summary

Cyberani by aramco digital is seeking an Advisor to provide visionary guidance on security telemetry collection strategy, data engineering, and MDR service evolution. You will shape client security architectures, mentor team members, and handle client escalations.

Responsibilities include strategic thought leadership, advisory engagement, and performance excellence, with deep SIEM experience, cloud and containerization skills, and a focus on automation and quality.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information systems, or a related field.
• 9+ years of experience with SIEM platforms, log engineering, and security operations.

Responsibilities

• Define the long‑term vision for log‑data acquisition, normalization, and analytics across all service lines.
• Publish whitepapers, best‑practice guides, and thought‑leadership content for internal and external audiences.
• Architect enterprise‑scale telemetry frameworks across on‑premise, cloud, and OT environments.
• Serve as the senior technical advisor for strategic customers, presenting roadmap recommendations and risk assessments.
• Conduct executive‑level workshops and security posture reviews for tiering, identifying clients’ risks and delivering actionable recommendations.
• Evaluate and recommend emerging technologies (e.g., graph analytics, zero‑trust telemetry).
• Define KPIs for ingestion latency, data fidelity, and detection efficacy.
• Champion the implementation of automated quality gates and continuous improvement loops.
• Handle and train the team members for complex MDR integration tasks.
• Define operation standards, plans, guidelines and ensure team is in compliance with the defined procedure.
• Automate and optimize onboarding tasks.

Skills

Analytical skills

Troubleshooting

Communication skills

Cross-functional collaboration

Education

Bachelor’s degree in computer science, cybersecurity, information systems, or related field

Tools

Python

PowerShell

Bash

Go

Ansible

Terraform

Jenkins

Docker

Kubernetes

Splunk

QRadar

Elastic

Azure Sentinel

AWS

GCP

Job description

The Advisor provides visionary, and guidance on security telemetry collection strategy, data engineering, and MDR service evolution. Acting as a senior subject‑matter expert, the Advisor shapes client security architectures, and mentors team members and handle client's escalation. Supervise projects and ensure optimization is considered to provide efficient MDR service.

Responsibilities

Strategic Thought Leadership

• Define the long‑term vision for log‑data acquisition, normalization, and analytics across all service lines.
• Publish whitepapers, best‑practice guides, and thought‑leadership content for internal and external audiences.
• Architect enterprise‑scale telemetry frameworks that span on‑premise, cloud, and OT environments.

Advisory & Client Engagement

• Serve as the senior technical advisor for strategic customers, presenting roadmap recommendations and risk assessments.
• Conduct executive‑level workshops and security posture reviews for tiering, identifying clients’ risks and delivering actionable recommendations.
• Evaluate and recommend emerging technologies (e.g., graph analytics, zero‑trust telemetry).

Performance & Quality Excellence

• Define KPIs for ingestion latency, data fidelity, and detection efficacy.
• Champion the implementation of automated quality gates and continuous improvement loops.
• Handle and train the team members for complex MDR integration tasks.
• Define operation standards, plans, guidelines and ensure team is in compliance with the defined procedure.
• Automate and optimize onboarding tasks.

Requirements

• Bachelor’s degree in computer science, Cybersecurity, Information Systems, or a related field
• 9+ years of experience with SIEM platforms, log engineering, and security operations.

Nature of Experience

• Deep knowledge of SIEM architectures (e.g., Splunk, QRadar, Elastic, Azure Sentinel).
• Mastery of log formats, protocols, and data models (CEF, JSON, Syslog, OpenTelemetry).
• Advanced scripting/programming (Python, PowerShell, Bash, Go) and automation tools (Ansible, Terraform, Jenkins).
• Experience with containerization (Docker/Kubernetes) and cloud platforms (AWS, Azure, GCP).

Skills

• Strong analytical, troubleshooting, and communication skills
• Ability to manage priorities and work cross-functionally in a fast‑paced environment
• Cloud security certifications (CCSP, AWS Security Specialty)