Riyadh-Based Senior Splunk Architect | Cybersecurity

Help AG; Riyadh; On-site; SAR 300,000 - 520,000; Full time

Benefits offered by this job

Health insurance

Career progression

Training program

Team activities

Job summary

Help AG, the cybersecurity arm of the e&, is seeking a Senior Cybersecurity Specialist (Splunk Architect) to lead Splunk deployments, SIEM administration, and security operations for clients. Based in Riyadh, you will collaborate with SOC analysts, threat experts, and solution architects to deliver high-profile services within our managed security framework.

You will drive integration of technologies, refine detections, and support vulnerability management, EDR, and cloud security integrations

Qualifications

• Minimum 3 years of professional experience supporting and maintaining Splunk SIEM & Enterprise Security.
• 3-5 years of experience with advanced tuning of Splunk SIEM content.
• Professional experience working with networks and network architecture.
• Bachelor's degree or equivalent training with experience in a Security Operations Center, Managed Security, or client network environment.
• Information security knowledge in one or more areas such as EDR.
• Hands-on experience with EDR (e.g., Carbon Black), Vectra, and Microsoft Azure.
• Security certifications on Splunk Admin, Splunk Architect, Splunk Consultant are a plus.
• Knowledge of Linux and Windows operating systems.
• Experience with other SIEM solutions such as QRadar and LogRhythm is highly preferred.
• Experience working with clients in a service delivery function.
• Shift flexibility, including after-hours support when needed.
• Experience with incident/problem tracking and knowledge bases.

Responsibilities

• Administering Splunk and Splunk Apps to develop or extend apps for specialized functionality.
• Integrating Splunk with a wide variety of legacy data sources.
• Adapt to learn new SOC technologies from different vendors.
• Collaborate with application and infrastructure teams to establish best practices for Splunk data and visuals.
• Design and support Microsoft security technologies (Azure, O365 ATP, Defender ATP) and their integrations.
• Handle deployment and mitigation of vulnerability scanners with SLA.
• Document vulnerabilities and mitigation actions.
• Manage EDR sensors including deployment, operations, updates, and patching.
• Create watchlists to detect IoCs and new threats.
• Assess customer needs, design solutions, and implement the design.
• Quickly build and test new technology viability.
• Serve as primary responder for MSS customer systems and client configurations.
• Work with SOC to enhance service quality and processes.
• Fine tune false positives and improve MSS processes.
• Develop content for SOC technologies (e.g., Splunk use cases) in cooperation with SOC.

Skills

Splunk SIEM

Splunk tuning

Network architecture

EDR experience

Linux

Windows

Azure

QRadar

LogRhythm

SOC experience

Education

Bachelor's degree in IT/Security

Tools

Splunk Apps

Job description

Help AG, the cybersecurity arm of the e&, is seeking a Senior Cybersecurity Specialist (Splunk Architect) to lead Splunk deployments, SIEM administration, and security operations for clients. Based in Riyadh, you will collaborate with SOC analysts, threat experts, and solution architects to deliver high-profile services within our managed security framework.

You will drive integration of technologies, refine detections, and support vulnerability management, EDR, and cloud security integrations