Senior IT Security Operation Architect - Saudi National- Riyadh, KSA

DeepSource Technologies; Riyadh; On-site; SAR 350,000 - 650,000; Full time

Job summary

DeepSource Technologies is seeking a Senior IT Security Operations Architect to design, build, and govern an enterprise security operations framework across hybrid infrastructure. You will align security controls with business goals, cloud environments, and regulatory standards.

The role requires 10+ years in IT security, with 4+ years as a Security Architect or Principal Engineer managing enterprise SOCs. Expertise in SOC pipelines, SIEM/SOAR (Splunk, Sentinel, Cortex), and Zero Trust is

Qualifications

• 10+ years of progressive IT security experience with 4+ years as architect/engineer on enterprise SOC.
• Expert in SOC pipelines, SIEM/SOAR architectures and automated incident response.
• Strong knowledge of hybrid cloud security and Zero Trust implementations.
• Familiarity with local/regulatory frameworks (NCA-ECC, SAMA CSF) and ISO/NIST standards.

Responsibilities

• Design scalable security architectures for hybrid on-premises and cloud environments.
• Build and optimize SOC workflows, playbooks, and SIEM/SOAR integrations.
• Oversee deployment of EDR/XDR, PAM, and CSPM tools across enterprise estates.
• Lead threat hunting, red/blue collaboration, and disaster recovery planning.
• Ensure governance and regulatory compliance across designs and operations.

Skills

Security Architecture

SOC Design

SIEM/SOAR

EDR/XDR

Zero Trust

Regulatory Compliance

Cloud Security

Threat Hunting

PAM

Hybrid Cloud

Education

CISSP-ISSAP

CISM

SABSA

TOGAF

CCSP

Tools

Splunk

Microsoft Sentinel

Cortex XSOAR

Palo Alto

Fortinet

CSPM Tools

Job description

The Senior IT Security Operations Architect designs, builds, and governs the overarching security operations framework, SOC architecture, and threat mitigation strategies across enterprise hybrid infrastructure. This strategic and technical role aligns operational security systems (SIEM/SOAR, EDR, IAM, Network Defense) with business goals, cloud environments, and national compliance standards.

Key Responsibilities

• Architecture & Strategy Design: Design scalable security architectures for enterprise hybrid environments (On-Premises, AWS, Azure), integrating Zero Trust models and operational security controls.

• SOC & SOAR Integration: Build and optimize Security Operations Center (SOC) workflows, automation playbooks (SOAR), and SIEM architecture to reduce incident response time and eliminate operational fatigue.

• Security Tool Engineering Oversight: Architect the deployment and lifecycle management of Next-Gen Firewalls (Palo Alto, Fortinet), EDR/XDR ecosystems, PAM, and Cloud Security Posture Management (CSPM) tools.

• Threat Intelligence & Resilience: Establish proactive threat-hunting programs, red/blue team operational alignment, and high-availability disaster recovery frameworks.

• Governance & Regulatory Compliance: Ensure all operational security designs strictly comply with local regulatory frameworks (NCA-ECC, SAMA CSF) and global standards (ISO 27001, NIST).

• Minimum 10+ years of progressive experience in IT security, with at least 4+ years as a Security Architect or Principal Security Engineer managing enterprise SOC frameworks.
• Deep expertise in designing enterprise SOC pipelines, SIEM/SOAR architectures (Splunk, Sentinel, Cortex), and automated incident response playbooks.
• Proven track record in hybrid cloud security architecture (Azure, AWS) and Zero Trust Network Architecture (ZTNA) implementations.
• Hands-on mastery of governance frameworks and local regulatory compliance (NCA-ECC, SAMA, ISO 27001, NIST CSF) in Saudi Arabia or the wider GCC.
• Hold advanced architecture certifications such as CISSP-ISSAP, CISM, SABSA, TOGAF, or CCSP.