Senior SIEM Deployment Engineer: Splunk & LogRhythm Expert

DS DeepSource; Riyadh; On-site; SAR 260,000 - 420,000; Full time

Job summary

DS DeepSource seeks an experienced SIEM Deployment Engineer to lead or support Splunk/SIEM deployment across enterprise environments. You will plan, install, configure, and tune deployments, integrating diverse log sources and developing parsers, rules, dashboards, and reports.

You will collaborate with SOC teams to optimize threat detection, tune use cases, and reduce false positives, while documenting procedures and transferring knowledge to clients or internal teams.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 8-10 years of experience in Splunk or SIEM deployment and cybersecurity.
• Proven experience with LogRhythm SIEM deployment in enterprise environments.
• Strong understanding of log analysis, incident response, and threat detection.
• Familiarity with log source integration: Windows Event Logs, Syslog, NetFlow, etc.
• Scripting experience (PowerShell, Python, etc.) is a plus.
• Knowledge of cybersecurity frameworks (MITRE ATT&CK, NIST, etc.) is an advantage.
• LogRhythm certifications (e.g., LogRhythm Deployment Fundamentals, LogRhythm Analyst) are a strong plus.

Responsibilities

• Lead end-to-end deployment of Splunk or SIEM platform, including planning, architecture design, installation, configuration, and tuning.
• Integrate log sources from various platforms (Windows, Linux, firewalls, routers, endpoint protection, etc.).
• Develop custom parsers and log normalization rules.
• Build correlation rules, alerts, dashboards, and reports based on customer requirements.
• Conduct use case development, threat detection tuning, and optimization of false positives.
• Collaborate with SOC teams to ensure effective threat monitoring and incident detection.
• Document implementation procedures, configuration guides, and troubleshooting steps.
• Provide knowledge transfer and training to internal teams or clients.
• Ensure compliance with industry standards (e.g., NCA ECC, SAMA CSF, ISO 27001).

Skills

SIEM deployment

Splunk

Log analysis

Incident response

Threat detection

Scripting (PowerShell, Python)

Cybersecurity frameworks (MITRE ATT&CK

Log source integration

Education

Bachelor’s degree in Computer Science/Cybersecurity

Tools

Splunk

LogRhythm

Syslog

Windows Event Logs

NetFlow

PowerShell

Python

Job description

DS DeepSource seeks an experienced SIEM Deployment Engineer to lead or support Splunk/SIEM deployment across enterprise environments. You will plan, install, configure, and tune deployments, integrating diverse log sources and developing parsers, rules, dashboards, and reports.

You will collaborate with SOC teams to optimize threat detection, tune use cases, and reduce false positives, while documenting procedures and transferring knowledge to clients or internal teams.