Senior Cybersecurity Production Lead - SIEM/SOAR & IR

Tawantech; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

Tawantech is seeking a Senior Specialist - Cybersecurity Production Support in Saudi Arabia to maintain and enhance cybersecurity platforms with a focus on high availability and security monitoring. You will ensure smooth incident handling, root cause analysis, and collaboration with security, infrastructure teams, and vendors.

The role emphasizes hands-on experience with Splunk SIEM, Cortex XSOAR, VPN technologies, and ITIL-aligned incident management.

Qualifications

• 4-8 years of cybersecurity production support experience in enterprise or financial environments.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Hands-on experience with SIEM, SOAR, VPN, and security monitoring solutions.
• Strong understanding of cybersecurity operations, threat detection, and log analysis.
• Experience with ITIL Incident, Problem, and Change Management.
• Knowledge of regional cybersecurity regulations and basic scripting is a plus.

Responsibilities

• Provide production support for cybersecurity platforms including SIEM, SOAR, VPN, and security monitoring solutions.
• Monitor dashboards, alerts, and operational activities across enterprise environments.
• Support Splunk SIEM use cases, log ingestion, correlation rules, and performance optimization.
• Manage and maintain SOAR workflows, playbooks, and automation processes.
• Support VPN infrastructure including secure remote access and site-to-site connectivity.
• Perform Incident, Problem, and Change Management according to ITIL practices.
• Conduct Root Cause Analysis for security incidents and platform issues.
• Support Cyber Incident Response activities including investigation and remediation.
• Participate in Disaster Recovery and Business Continuity Planning.
• Maintain security documentation, runbooks, SOPs, and operational reports.
• Collaborate with security, infrastructure teams, and vendors for issue resolution.

Skills

SIEM experience

SOAR experience

VPN technologies

Security monitoring

Incident response

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk Enterprise / Splunk ES

Cortex XSOAR / Splunk SOAR

IPSec / SSL VPN

ITIL tooling & processes

Job description

Tawantech is seeking a Senior Specialist - Cybersecurity Production Support in Saudi Arabia to maintain and enhance cybersecurity platforms with a focus on high availability and security monitoring. You will ensure smooth incident handling, root cause analysis, and collaboration with security, infrastructure teams, and vendors.

The role emphasizes hands-on experience with Splunk SIEM, Cortex XSOAR, VPN technologies, and ITIL-aligned incident management.