Senior IT Security Operations Engineer

Deepsource Technologies; Riyadh; On-site; SAR 250,000 - 390,000; Full time

Job summary

Deepsource Technologies in Riyadh, Saudi Arabia, seeks a Senior IT Security Operations Engineer to safeguard enterprise networks, data and cloud environments, bridging infrastructure management with threat detection and incident response.

The role leads security monitoring, SIEM log analysis, IAM governance, and patching, with hands-on work on firewalls, VPNs, EDR, and PAM. Must hold security certifications and be adept at Windows/Linux security across on‑prem and cloud.

Qualifications

• 6+ years of hands-on IT security administration, SOC engineering or network security operations.
• Proficiency with SIEM, EDR, and NGFWs across on-prem and cloud environments.
• Experience with IAM, PAM, MFA, and access controls in enterprise settings.

Responsibilities

• Lead Tier-2/Tier-3 security investigations and incident response.
• Analyze SIEM logs, detect threats, and mitigate incidents to minimize downtime.
• Enforce IAM controls, PAM, MFA, and RBAC across Windows/Linux and cloud platforms.
• Audit firewalls VPNs EDRs and proxy controls; coordinate vulnerability management and patching.

Skills

Threat detection

Incident response

IAM governance

PAM

SIEM

EDR

Firewalls

Cloud security

MFA

RBAC

Education

CompTIA Security+

CISSP

CEH

CCSP

ITIL4

ISO 27001

NCA-ECC

Tools

Splunk

QRadar

Sentinel

CrowdStrike

Defender

Palo Alto

Fortinet

Entra ID

Active Directory

Job description

The Senior IT Security Operations Engineer safeguards corporate IT infrastructure networks enterprise data and cloud environments against operational security risks and threats

This hands-on role bridges infrastructure management with threat detection incident response IAM governance and security standard compliance across enterprise systems

Key Responsibilities

Infrastructure amp Network Defense Configure manage and audit enterprise firewalls VPNs Endpoint Detection and Response EDR agents and web proxy controls Security Monitoring amp Incident Response Lead Tier-2 Tier-3 security event investigations analyze SIEM logs and mitigate security incidents to limit operational downtime Identity amp Access Governance Enforce strict identity and access management IAM controls privileged access management PAM multi-factor authentication and role-based access policies Vulnerability amp Patch Management Direct routine infrastructure vulnerability scans prioritize critical patching schedules with IT infrastructure teams and verify system hardening Backup Integrity amp System Audits Ensure secure backup configurations system disaster recovery readiness and adherence to security standards ITIL ISO 27001 NCA-ECC Minimum 6+ years of hands-on experience in IT security administration, SOC engineering, or network security operations.Advanced proficiency with core security solutions including SIEM tools (Splunk, QRadar, Sentinel), EDR platforms (CrowdStrike, Defender), and Next-Gen Firewalls (Palo Alto, Fortinet) .Strong expertise in Identity & Access Management (Active Directory, Entra ID, PAM solutions) , multi-factor authentication, and network access controls.Proven track record in threat detection, incident response, log analysis, and system hardening across Windows/Linux servers and cloud platforms (Azure/AWS).Hold at least one active industry certification such as CompTIA Security+, CISSP, CEH, CCSP, or ITIL4 .