SIEM Engineer: Onboard Logs, Tune Rules, Detect Threats

SITE سايت; Riyadh; On-site; SAR 167,000 - 312,000; Full time

Benefits offered by this job

Medical insurance for employee and his

Medical insurance for family

Medical insurance for parents

Job summary

SITE سايت is seeking an experienced SIEM Administrator to oversee the organization’s SIEM platform, ensuring high availability, log integrity, and effective threat detection across on-prem and cloud sources.

You will onboard log sources, develop and tune correlation rules, dashboards, and alerts, support SOC analysts, and produce dashboards and reports. Collaborate with security and IT teams to improve monitoring coverage and incident response.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field.
• Proven 3+ years in cybersecurity, with hands-on SIEM administration experience on enterprise platforms.

Responsibilities

• Administer, configure, and maintain the SIEM platform for high availability and optimal performance.
• Integrate and onboard log sources from servers, endpoints, networks, cloud services, and security solutions.
• Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts.
• Monitor SIEM health, troubleshoot performance, and ensure continuous log collection and data integrity.
• Perform log parsing, normalization, and validation for accurate event correlation and reporting.
• Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection.
• Support SOC analysts by investigating SIEM-related issues and enhancing visibility.
• Generate security reports, dashboards, and metrics for operational and management reporting.
• Collaborate with security, infra, and app teams to integrate new systems and improve monitoring.
• Support SIEM upgrades, maintenance, and new use case implementations.
• Maintain SIEM documentation including log source inventory, rules, and procedures.
• Contribute to continuous SIEM architecture and SOC monitoring improvements.

Skills

SIEM administration

Threat detection

Log management

Correlation rules

Dashboards & alerts

Log parsing

SOC support

Education

Bachelor's degree in Cybersecurity, IT, CS, Digital Forensics or related field

Tools

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

LogRhythm

Job description

SITE سايت is seeking an experienced SIEM Administrator to oversee the organization’s SIEM platform, ensuring high availability, log integrity, and effective threat detection across on-prem and cloud sources.

You will onboard log sources, develop and tune correlation rules, dashboards, and alerts, support SOC analysts, and produce dashboards and reports. Collaborate with security and IT teams to improve monitoring coverage and incident response.