SIEM Architect & Threat Detection Lead

Innovative Solutions; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Innovative Solutions is seeking an experienced SIEM Administrator to design, deploy, and maintain our SIEM platform. You will onboard log sources, build custom rules, and ensure SOC tools run seamlessly to protect enterprise assets.

The role requires strong platform architecture, threat modeling, and data governance experience across Windows and Unix environments, with hands-on expertise in Splunk, QRadar, LogRhythm, and Microsoft Sentinel.

Qualifications

• Bachelor's degree in a related field or equivalent professional experience.

Responsibilities

• Design, deploy, patch, and upgrade the SIEM platform and agents.
• Collaborate with business units to map network hierarchies and classify log sources.
• Build custom API connectors and parsers for non-standard log sources.
• Develop robust use cases and SIEM detection rules; implement MITRE ATT&CK modeling.
• Troubleshoot day-to-day issues across log sources, collectors, and SOC tools.
• Manage data archiving, backups, retention, and purging configurations for compliance.
• Raise and manage change tickets for administrative tasks and prepare assessment reports.
• Leverage Windows and Unix admin skills to support infrastructure health.

Skills

Platform architecture

Log onboarding

Custom development

Threat modeling

Troubleshooting

Data governance

Change management

System administration

MITRE ATT&CK modeling

Education

Bachelor's degree in related field

Tools

Splunk

QRadar

LogRhythm

Microsoft Sentinel

Palo Alto XSIAM

Job description

Innovative Solutions is seeking an experienced SIEM Administrator to design, deploy, and maintain our SIEM platform. You will onboard log sources, build custom rules, and ensure SOC tools run seamlessly to protect enterprise assets.

The role requires strong platform architecture, threat modeling, and data governance experience across Windows and Unix environments, with hands-on expertise in Splunk, QRadar, LogRhythm, and Microsoft Sentinel.