Senior IT Security Operation- Saudi National- Riyadh, KSA

DeepSource Technologies; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

DeepSource Technologies is seeking a Senior IT Security Operations Engineer to safeguard our IT infrastructure, networks, data, and cloud environments. The role blends hands-on security administration with threat detection, incident response, and IAM governance across enterprise systems.

You will lead investigations, manage SIEM/EDR tools, enforce strong access controls, and drive patching and hardening initiatives in a multi-platform environment including Windows, Linux, and cloud services.

Qualifications

• Minimum 6+ years of hands-on experience in IT security administration, SOC engineering, or network security operations.
• Proven expertise with SIEM tools (Splunk, QRadar, Sentinel), EDR platforms (CrowdStrike, Defender), and Next-Gen Firewalls (Palo Alto, Fortinet).
• Strong Identity & Access Management (AD, Entra ID), PAM, MFA, and access controls.
• Experience in threat detection, incident response, log analysis, and system hardening across Windows/Linux servers and cloud (Azure/AWS).
• Hold active industry certifications such as CompTIA Security+, CISSP, CEH, CCSP, or ITIL4.

Responsibilities

• Infrastructure & Network Defense: Configure, manage, and audit firewalls, VPNs, EDR agents, and web proxies.
• Security Monitoring & Incident Response: Lead security event investigations, analyze SIEM logs, and mitigate incidents to limit downtime.
• Identity & Access Governance: Enforce IAM controls, PAM, MFA, and RBAC across enterprise systems.
• Vulnerability & Patch Management: Direct routine vulnerability scans, coordinate patching with IT teams, and verify hardening.
• Backup Integrity & System Audits: Ensure secure backups, DR readiness, and adherence to security standards (ITIL, ISO 27001, NCA-ECC).

Skills

Threat detection

Incident response

Log analysis

System hardening

Education

CompTIA Security+ or CISSP or CEH or CCSP or ITIL4

Tools

Splunk

QRadar

Sentinel

CrowdStrike

Defender

Palo Alto

Fortinet

Active Directory

Entra ID

Job description

The Senior IT Security Operations Engineer safeguards corporate IT infrastructure, networks, enterprise data, and cloud environments against operational security risks and threats. This hands-on role bridges infrastructure management with threat detection, incident response, IAM governance, and security standard compliance across enterprise systems.

Key Responsibilities

• Infrastructure & Network Defense: Configure, manage, and audit enterprise firewalls, VPNs, Endpoint Detection and Response (EDR) agents, and web proxy controls.

• Security Monitoring & Incident Response: Lead Tier-2/Tier-3 security event investigations, analyze SIEM logs, and mitigate security incidents to limit operational downtime.

• Identity & Access Governance: Enforce strict identity and access management (IAM) controls, privileged access management (PAM), multi-factor authentication, and role-based access policies.

• Vulnerability & Patch Management: Direct routine infrastructure vulnerability scans, prioritize critical patching schedules with IT infrastructure teams, and verify system hardening.

• Backup Integrity & System Audits: Ensure secure backup configurations, system disaster recovery readiness, and adherence to security standards (ITIL, ISO 27001, NCA-ECC).

• 1. Minimum 6+ years of hands-on experience in IT security administration, SOC engineering, or network security operations.
• 1. Advanced proficiency with core security solutions including SIEM tools (Splunk, QRadar, Sentinel), EDR platforms (CrowdStrike, Defender), and Next-Gen Firewalls (Palo Alto, Fortinet).
• 1. Strong expertise in Identity & Access Management (Active Directory, Entra ID, PAM solutions), multi-factor authentication, and network access controls.
• 1. Proven track record in threat detection, incident response, log analysis, and system hardening across Windows/Linux servers and cloud platforms (Azure/AWS).
• 1. Hold at least one active industry certification such as CompTIA Security+, CISSP, CEH, CCSP, or ITIL4.