Onsite Security Operations & SIEM Engineer

Cloud Consultancy - CCDS; Dammam; On-site; SAR 180,000 - 270,000; Full time

Job summary

Cloud Consultancy - CCDS is seeking a Security Operations & Monitoring Engineer to provide continuous monitoring and security-event analysis across encryption, KMS, HSM, database security and related infrastructure in Dammam.

The successful candidate will work with the SOC/SIEM and engineering teams to identify suspicious activities, triage security events, and support incident response with timely escalation and reporting.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT, CE, or related field.
• 4+ years in SOC, SIEM, security monitoring or incident triage.
• Hands-on experience with SIEM and security monitoring platforms.
• Strong analytical and troubleshooting skills.
• Willingness to work onsite in Dammam.

Responsibilities

• Perform continuous monitoring of cybersecurity systems and infrastructure.
• Monitor encryption, KMS, HSM, database security, and other events.
• Review and analyze system, security, audit, and application logs.
• Monitor security alerts through SIEM/SOC platforms.
• Carry out first-level investigation and triage of cybersecurity events.
• Correlate alerts from multiple technologies to identify incidents.
• Escalate critical or suspicious activities per procedures.
• Support incident-response investigations and evidence collection.
• Coordinate with engineering teams during incidents and service-impacting events.
• Assist in tuning monitoring rules and alert thresholds.
• Prepare operational, security, and incident reports.
• Maintain incident records and monitoring procedures.

Skills

SOC

SIEM

Security monitoring

Incident triage

Log analysis

Incident response

Alert management

Threat detection

Reporting

Education

Bachelor's degree in Cybersecurity

Tools

Splunk

Job description

Cloud Consultancy - CCDS is seeking a Security Operations & Monitoring Engineer to provide continuous monitoring and security-event analysis across encryption, KMS, HSM, database security and related infrastructure in Dammam.

The successful candidate will work with the SOC/SIEM and engineering teams to identify suspicious activities, triage security events, and support incident response with timely escalation and reporting.