الملخص
تبحث CCDS عن أخصائي دفاع سيبراني لتعزيز قدرات الكشف والمراقبة عبر منصات SIEM وSOAR وEDR وDLP وأمن البريد الإلكتروني وغيرها. تشمل المسؤوليات تطوير قواعد الكشف وسير عمل الاستجابة، وربط السجلات والبيانات، وتحسين دقة التنبيهات، ودعم تحليل التهديدات وإجراءات مركز العمليات والامتثال والتقارير. العمل حضوري في الرياض ضمن مشروع لخدمات الأمن السيبراني المُدارة، بمدة طرح تبلغ 13 شهرًا. يُشترط الحصول على درجة بكالوريوس ذات صلة وخبرة لا تقل عن 7 سنوات في عمليات مركز العمليات الأمنية أو الدفاع السيبراني، وتُفضّل شهادات مثل CISSP أو GCIA أو GSEC أو GCIH أو CISM.
نص الإعلان
كما نُشر على ccds.ws. نقلناه من موقع صاحب العمل كما كتبه.
Location: On-site – Riyadh, Saudi Arabia
Contract/engagement: Project-based managed cybersecurity services (13-month RFP term)
Minimum experience: 7+ years
Role Purpose
Strengthen SOC detection and monitoring capabilities across SIEM, SOAR, EDR, DLP, email security, and other security platforms.
Key Responsibilities
· Develop and enhance security detection capabilities across SIEM, SOAR, EDR, DLP, and email security platforms.
· Design correlation logic, detection rules, threat-detection use cases, alerts, and supporting response workflows.
· Integrate telemetry and logs from security systems to improve monitoring coverage.
· Continuously tune detections to improve accuracy and reduce false positives.
· Analyze security events and suspicious activity and escalate validated threats through approved processes.
· Maintain SOC policies, procedures, workflows, and operational playbooks.
· Map detection coverage to MITRE ATT&CK and coordinate improvements with cybersecurity, governance, and technical teams.
· Support security assessments, regulatory compliance, reporting, and security-vendor coordination.
Technical and Professional Requirements
· Bachelor’s degree in Computer Science, Information Security, or a related field.
· At least 7 years of experience in SOC operations or cyber defense.
· Hands-on experience with SIEM, SOAR, EDR, DLP, email security gateways, and log/telemetry integration.
· Proven experience developing detection use cases and tuning security rules.
· Knowledge of cyberattack techniques, threat detection, MITRE ATT&CK, NCA requirements, and SOC operating models.
Personal Requirements
· Strong analytical and problem-solving skills.
· Clear communication, documentation, and cross-team coordination.
· Persistent, quality-focused, and comfortable working with vendors and technical partners.
· Able to prioritize alerts and improvements in a high-volume operational environment.
Professional Certifications
Preferred: CISSP, GCIA, GSEC, GCIH, CISM, or equivalent.