Senior Detection Engineer – SIEM/XDR & Threat Tuning

NourNet; Riyadh; Vor Ort; SAR 180.000 - 300.000; Vollzeit

Zusammenfassung

NourNet is seeking an experienced Detection Analyst to join our cybersecurity team in Riyadh. This on-site role focuses on designing and tuning SIEM/XDR detection content to improve threat detection coverage and operational effectiveness.

You will develop and optimize detection rules, dashboards, and reports, analyze alert patterns, and translate threat intelligence into actionable detections. Collaboration with Tier-1/2 SOC and familiarity with MITRE ATT&CK are valued assets.

Qualifikationen

• 5+ years of experience in SOC operations, detection engineering, or cybersecurity monitoring.
• Advanced experience developing SIEM queries, correlation rules, and detection logic.
• Hands-on experience with SIEM/XDR platforms, alert analysis, and detection optimization.
• Experience with Cortex XSOAR including playbooks, workflows, or integrations is preferred.
• Strong understanding of threat intelligence, incident response, and security event analysis.

Aufgaben

• Develop, maintain, and optimize detection content across SIEM/XDR platforms.
• Analyze alerts and incidents to identify tuning opportunities and gaps.
• Translate threat intel findings into actionable detection rules.
• Perform regression testing and validate functionality of rules.
• Document detection logic, data sources, and tuning history.
• Collaborate with SOC analysts to improve detection effectiveness.
• Map use cases to MITRE ATT&CK and applicable controls.
• Support integration and optimization of detection workflows with Cortex XSOAR.

Kenntnisse

Detection engineering

SOC operations

SIEM queries

Correlation rules

Threat intelligence

Incident response

MITRE ATT&CK

Collaboration

Tools

Cortex XSOAR

Jobbeschreibung

NourNet is seeking an experienced Detection Analyst to join our cybersecurity team in Riyadh. This on-site role focuses on designing and tuning SIEM/XDR detection content to improve threat detection coverage and operational effectiveness.

You will develop and optimize detection rules, dashboards, and reports, analyze alert patterns, and translate threat intelligence into actionable detections. Collaboration with Tier-1/2 SOC and familiarity with MITRE ATT&CK are valued assets.