SIEM Architect: Threat Detection & Log Onboarding

Innovative Solutions SA; Riyadh; On-site; SAR 90,000 - 130,000; Full time

Job summary

Innovative Solutions IS in Riyadh seeks a skilled SIEM Administrator to design, deploy, and maintain the SIEM platform across enterprise systems. You will onboard log sources, build custom rules, and ensure security operations tools run seamlessly to protect assets.

You will work with cross-functional teams to map networks, implement MITRE ATT&CK-based detections, and manage data governance, archiving, and change processes. Strong Windows/Unix admin skills are plus.

Qualifications

• Bachelor's degree in a related field or equivalent professional experience.
• Strong understanding of cybersecurity and IT disciplines including networks, operating systems, authentication, enterprise architecture and incident response.
• Experience with log aggregation/correlation technologies such as Splunk, QRadar, LogRhythm, Sentinel or XSIAM.
• Proven system administration experience on Windows and Unix platforms.

Responsibilities

• Platform Architecture: Design, deploy, patch, and upgrade the SIEM platform and agents.
• Log Onboarding & Integration: Map network hierarchies, establish building blocks, and classify log sources.
• Custom Development: Build API connectors and parsers for non-standard log sources.
• Threat Detection & Modeling: Develop use cases and custom SIEM detection rules; MITRE ATT&CK modeling.
• Operations & Troubleshooting: Resolve day-to-day issues across log sources, collectors, and SOC tools.
• Data Governance: Manage data archiving, backups, retention, and purging.
• Change & Audit Management: Manage change tickets and prepare assessment reports.
• System Administration: Windows and Unix administration to support infrastructure health.

Skills

SIEM

Log management

Threat detection

Education

Bachelor's degree

Tools

Splunk

QRadar

LogRhythm

Microsoft Sentinel

XSIAM

Job description

Innovative Solutions IS in Riyadh seeks a skilled SIEM Administrator to design, deploy, and maintain the SIEM platform across enterprise systems. You will onboard log sources, build custom rules, and ensure security operations tools run seamlessly to protect assets.

You will work with cross-functional teams to map networks, implement MITRE ATT&CK-based detections, and manage data governance, archiving, and change processes. Strong Windows/Unix admin skills are plus.