Cybersecurity Operations Expert (Saudi) - Riyadh, KSA

Role Overview

Cybersecurity Operations Expert with DeepSource Technologies in Riyadh, KSA. The role focuses on protecting systems, networks, endpoints, applications, and users by detecting threats, responding to security events, coordinating remediation activities, and maintaining effective cybersecurity operations as part of the first line of defense.

Role Purpose

Support day-to-day execution, monitoring, and improvement of operational security controls across enterprise IT environments. The position operates and executes controls rather than performing independent oversight, policy governance, regulatory compliance assurance, or internal audit activities.

Key Responsibilities

Threat Detection & Incident Response

• Monitor and analyze cybersecurity alerts, events, and incidents.
• Perform initial triage, investigation, containment support, and escalation of security incidents.
• Maintain incident response procedures, runbooks, and operational documentation.

Security Operations & Monitoring

• Support endpoint, network, cloud, and email security operations.
• Execute and maintain operational security controls and monitoring use cases.
• Review and validate security integrations between cybersecurity tools, IT systems, cloud platforms, and third-party solutions to ensure proper logging, alerting, connectivity, and control effectiveness.

Vulnerability & Risk Management

• Coordinate vulnerability remediation with relevant technical teams.
• Track remediation actions and follow up on risk reduction activities.
• Monitor and support security-related patching, platform upgrades, and operational technology refresh activities to ensure minimal security exposure and service disruption.

Access & Identity Security

• Support access control reviews, privileged access monitoring, and identity-related security operations.

Infrastructure & Integration Support

• Support security activities during system, tool, and infrastructure migrations, including validation of controls, configuration reviews, and post-migration security checks.
• Work closely with IT operations, network, cloud, server, endpoint, and application teams to ensure security controls are implemented and functioning effectively.

Continuous Improvement

• Contribute to continuous improvement of cybersecurity activities and processes.
• Support business resilience by reducing operational cyber risk exposure.
• Contribute to security awareness from an operational perspective.

Qualifications & Experience

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.
• 5+ years of experience in cybersecurity operations, security monitoring, incident response, vulnerability management, or security engineering functions.
• Hands-on experience with enterprise security technologies, including SIEM, EDR/XDR, email security, identity and access management, network security, cloud security, and vulnerability management platforms.
• Experience working in hybrid environments spanning on-premises infrastructure, cloud platforms, and third-party services.

Skills & Competencies

• Strong understanding of cybersecurity frameworks, attack techniques, threat detection methodologies, and security operations best practices.

Additional Information

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)