Consultant - SIEM IT Engineer

Job Description

At WSP, you can access our global scale, contribute to landmark projects and connect with the brightest minds in your field to do the best work of your life. You can embrace your curiosity in a culture that celebrates new ideas and diverse perspectives. You can experience a world of opportunity and the chance to shape a career as unique as you. WSP is looking for a Consultant with expertise in Security Information and Event Management (SIEM) for a project in Saudi Arabia. Candidates must possess a Cybersecurity certification.

Responsibilities

• Understand TAHAKOM’s digital environment, security goals, and coverage gaps.
• Identify necessary log sources, modules, and use cases to close security gaps.
• Onboard new and missing log sources including servers, network devices, and applications.
• Validate and optimize existing log sources for efficient log forwarding, indexing, and reporting.
• Perform fine-tuning of SIEM infrastructure including log collectors and software upgrades.
• Tune and optimize use cases and correlation rules to reduce false positives and eliminate duplicates.
• Align alert outputs and alarms with TAHAKOM’s operational requirements.
• Evaluate, test, and validate SIEM rules for true positive detection.
• Identify and implement relevant SOAR (Security Orchestration, Automation, and Response) plugins.
• Conduct quarterly health checks of the SIEM platform or after any major changes.
• Generate and deliver quarterly reports on activities, improvements, and system health.
• Assist in filing and tracking support cases with SIEM vendors.
• Support configuration of dashboards, correlation rules, event parsing, enrichment, and alert logic.
  
  
  

Qualifications

• Proficiency in SIEM technologies (e.g., QRadar, Splunk, ArcSight, etc.)
• Strong knowledge in cybersecurity, event logging, and threat detection methodologies.
• Experience onboarding and integrating data sources (e.g., Syslog, Windows Event Logs).
• Ability to configure, test, and troubleshoot SIEM correlation rules and use cases.
• Hands-on experience with custom dashboard creation for threat monitoring and reporting.
• Familiarity with SOAR platforms and plugin integrations.
• Bachelor’s degree in Computer Science, Information Security, or related field, with no less than 10 years of experience.
• Relevant cybersecurity certifications (e.g., CEH, GCIA, GCFA, CISSP, vendor-specific SIEM certs).
• Proven track record of at least 3–5 years in SIEM engineering or SOC environments.
  
  
  

Imagine a better future for you and a better future for us all.

Work on landmark projects around the world and embrace opportunities to make an even bigger impact in the communities you care about. What if you could do the best work of your life and create a legacy for yourself?

With us, you can. Apply today.