Senior Cyber Defense Engineer - SOC Detection & SIEM

CCDS; Riyadh; On-site; SAR 300,000 - 520,000; Part time

Job summary

CCDS is recruiting a Senior SOC Engineer to strengthen detection and monitoring across SIEM, SOAR, EDR, and related security platforms. This on-site Riyadh role is a 13-month project-based engagement.

You'll design detection logic, integrate telemetry, tune rules to reduce false positives, and map coverage to MITRE ATT&CK while coordinating with cybersecurity teams. The position requires 7+ years in SOC operations, a bachelor's in a relevant field, and strong collaboration with vendors and

Qualifications

• Bachelor's degree in CS, Info Security, or related field.
• 7+ years of experience in SOC operations or cyber defense.
• Hands-on experience with SIEM, SOAR, EDR, DLP, email security gateways.
• Proven experience developing detection use cases and tuning security rules.
• Knowledge of MITRE ATT&CK, NCA requirements, and SOC operating models.

Responsibilities

• Develop and enhance security detection capabilities across SIEM, SOAR, EDR, DLP, and email security platforms.
• Design correlation logic, detection rules, threat-detection use cases, alerts, and supporting response workflows.
• Integrate telemetry and logs from security systems to improve monitoring coverage.
• Continuously tune detections to improve accuracy and reduce false positives.
• Analyze security events and escalat[e] validated threats through approved processes.
• Maintain SOC policies, procedures, workflows, and operational playbooks.
• Map detection coverage to MITRE ATT&CK and coordinate improvements with cybersecurity, governance, and technical teams.
• Support security assessments, regulatory compliance, reporting, and security-vendor coordination.]

Skills

Strong analytical and problem-solving

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

SIEM

SOAR

EDR

DLP

Email security gateways

Telemetry integration

Job description

CCDS is recruiting a Senior SOC Engineer to strengthen detection and monitoring across SIEM, SOAR, EDR, and related security platforms. This on-site Riyadh role is a 13-month project-based engagement.

You'll design detection logic, integrate telemetry, tune rules to reduce false positives, and map coverage to MITRE ATT&CK while coordinating with cybersecurity teams. The position requires 7+ years in SOC operations, a bachelor's in a relevant field, and strong collaboration with vendors and