SIEM MSS Lead Engineer: Log Onboarding & Ingestion

cyberani solutions; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

cyberani solutions in Riyadh is seeking an MSS Lead Engineer specializing in log onboarding, parsing, and data engineering within a SIEM environment. You will manage the full lifecycle of log data from onboarding and normalization to enrichment and delivery into detection platforms.

The role requires hands-on integration of diverse data sources, scripting and automation, system hardening, and collaboration with SOC and MDR teams to support threat detection and compliance.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field.
• 4–6 years of experience with SIEM platforms, log engineering, and security operations.
• Solid understanding of log formats (syslog, JSON, CEF) and network protocols.
• Proficiency in scripting (Python, Bash, PowerShell, etc.) for automation and parsing.
• Familiarity with system hardening techniques and secure configuration standards.
• Knowledge of endpoint, cloud, identity, and network security telemetry.
• Experience with automation/orchestration frameworks and security tool integrations.
• Relevant certifications (SIEM, scripting, or cybersecurity) are a plus.

Responsibilities

• Log Source Onboarding: Integrate new log sources into the SIEM ensuring quality and compliance.
• MDR Onboarding Support: Onboard systems and log streams into the MDR platform with visibility and alert fidelity.
• Parsing & Normalization: Create and maintain field extractions and parsing logic.
• Automation & Scripting: Develop scripts to streamline onboarding, data transformation, and health monitoring.
• System Hardening: Apply security best practices to harden log collection systems.
• Validation & QA: Ensure integrity, completeness, and performance of ingested log data.
• Architecture & Pipeline Design: Design scalable, high-throughput data pipelines with minimal data loss.
• Maintenance & Optimization: Tune ingestion and parsing to reduce noise and improve relevance.
• Security Use Case Support: Support detections, investigations, and compliance needs.

Skills

SIEM platforms

Log engineering

Automation scripting

Security operations

Data pipelines

Threat detection

System hardening

Telemetry

Education

Bachelor's degree

Job description

cyberani solutions in Riyadh is seeking an MSS Lead Engineer specializing in log onboarding, parsing, and data engineering within a SIEM environment. You will manage the full lifecycle of log data from onboarding and normalization to enrichment and delivery into detection platforms.

The role requires hands-on integration of diverse data sources, scripting and automation, system hardening, and collaboration with SOC and MDR teams to support threat detection and compliance.