Security Operations Engineer III — Remote, Equity & Generous PTO

Jobgether; Saudi Arabia; Remote; SAR 140,000 - 180,000; Full time

Benefits offered by this job

Remote work: Fully remote within a全球分布

Equity: Competitive share options

Paid time off: Minimum 25 days

Coworking access

Team events and annual retreat

Equipment: High-quality equipment

Home office support: £500 contribution

Learning budget

Healthcare: Private medical insurance

Additional location-based perks

Professional onboarding and teamwork

Job summary

Jobgether partner is seeking a Security Engineer III for Security Operations based in Saudi Arabia. You will own detection and response capabilities, building and optimizing SIEM detections, and automating responses with Python and no-code tools.

You will work across Elastic SIEM, AWS, Terraform, and incident response processes, collaborating with a distributed team to reduce operational risk and improve security maturity. Remote options and a strong learning culture are offered.

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections across Elastic SIEM and cloud environments.
• Proficiency in Python for scripting, automation, and security tooling.
• Experience with Terraform or other infrastructure‑as‑code technologies.
• Working knowledge of MITRE ATT&CK and applying it to threat detection and investigation.
• Excellent written communication to document investigations and risk decisions clearly.
• Ability to work independently and own security outcomes.
• Willingness to participate in on-call rotation for monitoring and response.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives from detection rule creation to automated response workflows.
• Build, tune, and maintain detections across Elastic SIEM and AWS environments, closing gaps in coverage.
• Manage the security investigation queue: triage alerts, investigate, escalate incidents, drive resolution.
• Document investigations and findings to support follow-up actions and knowledge sharing.
• Develop runbooks and automation using Python and no-code tools (Zapier, Tines) to speed up incident response.
• Make risk decisions within own area and escalate when extra expertise is needed.
• Support compliance by maintaining audit-ready security controls and evidence for SOC 2, PCI DSS.
• Use Terraform and Python to improve infrastructure supporting detections and tooling.
• Participate in on-call rotation and continuous improvement of detection coverage.

Skills

SIEM detections

Elastic SIEM

AWS environments

Python scripting

Terraform

Infrastructure as code

MITRE ATT&CK

investigating incidents

on-call rotation

Tools

Elastic

AWS

Terraform

Python

Zapier

Tines

Job description

Jobgether partner is seeking a Security Engineer III for Security Operations based in Saudi Arabia. You will own detection and response capabilities, building and optimizing SIEM detections, and automating responses with Python and no-code tools.

You will work across Elastic SIEM, AWS, Terraform, and incident response processes, collaborating with a distributed team to reduce operational risk and improve security maturity. Remote options and a strong learning culture are offered.