Senior Cybersecurity Monitoring & Defense Engineer

Job Description

 Lead cybersecurity incident response engagements, guiding and advising the Incident Response (IR) team to ensure the effective execution of response methodologies.

 Ensure report quality by supervising and reviewing incident reports, maintaining high standards of accuracy, clarity, and presentation.

 Enhance incident response tools, contributing to the development and improvement of internal response capabilities, including forensic tools and network monitoring sensors.

 Conduct collaborative exercises, working with Red Team consultants to design and implement defensive countermeasures against cyber threats.

 Develop and refine response methodologies, contributing to the creation and continuous enhancement of incident response frameworks and processes.

 Support threat intelligence operations, maintaining and strengthening the organization's Threat Intelligence Platform (TIP).

 Deliver structured reports, preparing detailed and well-organized documentation for cybersecurity incidents, including actionable recommendations.

 Present findings and recommendations, ensuring clarity and understanding across key stakeholders.

 Provide improvement reports, regularly updating the Incident Response Team Lead on activities, accomplishments, challenges, and resource needs.

 Collaborate with the SOC team, assisting in the implementation of new detection rules in SIEM, ensuring alignment with incident response methodologies and escalation processes.

Qualifications And Requirements

Education & Certification

 Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related field.

 Professional certifications as CHFI, GCIH, or GCFA.

Experience

 04 - 06 years of experience in incident response, digital forensics, or SOC operations.

 Saudi nationality is a must.

 Hands-on experience in cyber incident handling, triage, and escalation procedures.

 Strong familiarity with incident response frameworks such as NIST 800-61, and MITRE ATT&CK.

 Experience in SIEM configuration, log analysis, and forensic investigation tools.

 Knowledge of threat intelligence gathering and integration into security operations.

 Exposure to SOC operations and collaboration with Red Teams for improving defensive capabilities.

Technical Skills

 Strong analytical and investigative skills in cybersecurity incidents.

 Experience with threat hunting, digital forensics, and malware analysis.

 Ability to write clear, structured reports and present findings to stakeholders.

 Knowledge of incident response automation and SOAR platforms (preferred).

 Strong communication and leadership skills for guiding incident response teams.

 Fluency in Arabic and English.