MSS Principle Lead Engineer

Cyberani by aramco digital; Riyadh; On-site; SAR 280,000 - 460,000; Full time

Job summary

Cyberani by aramco digital seeks a Principle Lead Engineer to guide security telemetry, data engineering, and MDR service evolution. You will shape client security architectures, mentor teams, and manage escalations.

This senior role requires strategic vision across on‑premise, cloud, and OT, with a track record in SIEM, log pipelines, and cloud security.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information systems, or related field.
• 8+ years of experience with SIEM platforms, log engineering, and security operations.
• Deep knowledge of SIEM architectures (Splunk, QRadar, Elastic, Azure Sentinel).
• Mastery of log formats, protocols, and data models (CEF, JSON, Syslog, OpenTelemetry).
• Advanced scripting/programming (Python, PowerShell, Bash, Go) and automation tools (Ansible, Terraform, Jenkins).
• Experience with containerization (Docker/Kubernetes) and cloud platforms (AWS, Azure, GCP).

Responsibilities

• Define the long‑term vision for log‑data acquisition, normalization, and analytics across all service lines.
• Publish whitepapers, best‑practice guides, and thought‑leadership content for internal and external audiences.
• Architect enterprise‑scale telemetry frameworks spanning on‑premise, cloud, and OT environments.
• Serve as the senior technical advisor for strategic customers, presenting roadmap recommendations and risk assessments.
• Conduct executive‑level workshops and security posture reviews, identifying risks and delivering actionable recommendations.
• Evaluate and recommend emerging technologies (e.g., graph analytics, zero‑trust telemetry).
• Define KPIs for ingestion latency, data fidelity, and detection efficacy.
• Champion automated quality gates and continuous improvement loops.
• Handle and train team members for complex MDR integration tasks.
• Define operation standards, plans, guidelines and ensure compliance with procedures.
• Automate and optimize onboarding tasks.

Skills

Analytical skills

Troubleshooting

Communication skills

Prioritization

Cross-functional collaboration

Cloud security knowledge

Education

Bachelor’s degree in computer science, Cybersecurity, Information Systems, or related field

Tools

Docker

Kubernetes

AWS

Azure

GCP

Job description

The Principle Lead Engineer provides visionary guidance on security telemetry collection strategy, data engineering, and MDR service evolution. Acting as a senior subject‑matter expert, the Advisor shapes client security architectures, mentors team members, and handles client escalations. The Lead also supervises projects to ensure optimization is considered for efficient MDR service.

Responsibilities

Strategic Thought Leadership

• Define the long‑term vision for log‑data acquisition, normalization, and analytics across all service lines.
• Publish whitepapers, best‑practice guides, and thought‑leadership content for internal and external audiences.
• Architect enterprise‑scale telemetry frameworks that span on‑premise, cloud, and OT environments.

Advisory & Client Engagement

• Serve as the senior technical advisor for strategic customers, presenting roadmap recommendations and risk assessments.
• Conduct executive‑level workshops and security posture reviews for tiering, identifying clients’ risks and delivering actionable recommendations.
• Evaluate and recommend emerging technologies (e.g., graph analytics, zero‑trust telemetry).

Performance & Quality Excellence

• Define KPIs for ingestion latency, data fidelity, and detection efficacy.
• Champion the implementation of automated quality gates and continuous improvement loops.
• Handle and train the team members for complex MDR integration tasks.
• Define operation standards, plans, guidelines and ensure the team is in compliance with the defined procedure.
• Automate and optimize onboarding tasks.

Requirements

Bachelor’s degree in computer science, Cybersecurity, Information Systems, or a related field.

8+ years of experience with SIEM platforms, log engineering, and security operations.

Nature of Experience

• Deep knowledge of SIEM architectures (e.g., Splunk, QRadar, Elastic, Azure Sentinel).
• Mastery of log formats, protocols, and data models (CEF, JSON, Syslog, OpenTelemetry).
• Advanced scripting/programming (Python, PowerShell, Bash, Go) and automation tools (Ansible, Terraform, Jenkins).
• Experience with containerization (Docker/Kubernetes) and cloud platforms (AWS, Azure, GCP).

Skills

• Strong analytical, troubleshooting, and communication skills.
• Ability to manage priorities and work cross‑functionally in a fast‑paced environment.
• Cloud security certifications (CCSP, AWS Security Specialty).