SIEM Admin

Innovative Solutions SA; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

Innovative Solutions SA is seeking a skilled SIEM Administrator to design, deploy, and maintain our SIEM platform. You will lead log onboarding, build custom rules, and ensure SOC tools run smoothly to protect enterprise assets.

Ideal candidates have strong cybersecurity knowledge, incident response experience, and familiarity with enterprise logging across firewalls, AD, EDR, IDS/IPS, and cloud. This is a hands-on, collaborative role in a security-focused team.

Qualifications

• Bachelor's degree in a related field or equivalent professional experience.
• Strong knowledge of cybersecurity, networking, OS, auth protocols and incident response.
• Experience with enterprise tools and logging: firewalls, AD, EDR/AV, IDS/IPS, proxies, cloud. SOAR knowledge preferred.
• SIEM platforms experience: Splunk, QRadar, LogRhythm, MS Sentinel, or Palo Alto XSIAM.
• Solid understanding of risk management, CIA triad, cryptography, IAM and network security.
• Hands-on skills in system, network and OS hardening.

Responsibilities

• Platform Architecture: Design, deploy, patch, and upgrade the SIEM platform and agents.
• Log Onboarding & Integration: Map log sources and classify data for onboarding.
• Custom Development: Build API connectors and parsers for non-standard sources.
• Threat Detection & Modeling: Develop use cases and SIEM detection rules (MITRE aligned).
• Operations & Troubleshooting: Resolve issues across log sources, collectors, and SOC tools.
• Data Governance: Manage archiving, backups, retention, and purging for compliance.
• Change & Audit Management: Handle change tickets and prepare assessment reports.
• System Administration: Apply Windows/Unix admin skills to support health.

Skills

SIEM

Threat detection

Log onboarding

API development

MITRE ATT&CK

Windows admin

Unix admin

Incident response

Networking basics

Education

Bachelor's degree in a related field

Tools

Splunk

QRadar

LogRhythm

Microsoft Sentinel

Palo Alto XSIAM

Job description

Company Overview Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.

Company Overview Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services. Our mission is "Delivering secure and intelligent digital services that empower organizations"

About The Role

A skilled SIEM Administrator to design, deploy, and maintain our (SIEM) platform. In this role, you will be the backbone of our log management and threat detection infrastructure. You will work closely with various business units to onboard log sources, build custom rules, and ensure our security operations tools run seamlessly to protect enterprise assets.

Key Responsibilities

• Platform Architecture: Design, deploy, patch, and upgrade the SIEM platform and associated agents
• Log Onboarding & Integration: Collaborate with business units to map network hierarchies, establish building blocks, and classify log sources
• Custom Development: Build custom API connectors and parsers for non-standard log sources lacking out-of-the-box vendor support
• Threat Detection & Modeling: Develop robust use cases, create custom SIEM detection rules, and implement MITRE ATT&CK modeling
• Operations & Troubleshooting: Troubleshoot day-to-day issues across log sources, collectors, agents, and other SOC tools
• Data Governance: Manage data archiving, backups, retention, and purging configurations to align with compliance standards, restoring data as needed
• Change & Audit Management: Raise and manage change tickets for administrative tasks (e.g., patch upgrades, log onboarding) and prepare assessment reports for existing platforms
• System Administration: Leverage foundational Windows and Unix administration skills to support infrastructure health

Requirements

• Education: Bachelor's degree in a related field or equivalent demonstrated professional experience
• Core Technical Knowledge: Strong understanding of cybersecurity and IT disciplines, including networking, operating systems, authentication protocols, enterprise architecture, and incident response
• Enterprise Technology: Familiarity with common enterprise tools and logging capabilities (firewalls, Active Directory, EDR/antivirus, IDS/IPS, proxies, and cloud platforms). SOAR Knowledge ‘prefer
• SIEM Expertise: Understanding of log aggregation or correlation technologies such as Splunk, QRadar, LogRhythm, Microsoft Sentinel, or Palo Alto XSIAM
• Security Principles: Deep knowledge of risk management processes, CIA triad principles, cryptography, IAM, access controls, and network security methodologies
• Hardening: Proven experience in system administration, network, and OS hardening techniques