Summary
CCDS is seeking a Cyber Defense Specialist to strengthen security detection and monitoring across SIEM, SOAR, EDR, DLP, email security, and related platforms. The role develops detection rules and response workflows, integrates logs and telemetry, tunes alerts, and supports threat analysis, SOC playbooks, compliance, and reporting. The position is on-site in Riyadh, Saudi Arabia, for a project-based managed cybersecurity services engagement with a 13-month RFP term. Applicants need at least 7 years of SOC or cyber defense experience and a relevant bachelor’s degree; certifications such as CISSP, GCIA, GSEC, GCIH, or CISM are preferred.
The posting
As published on ccds.ws. Pulled from the employer's site and shown as they wrote it.
Location: On-site – Riyadh, Saudi Arabia
Contract/engagement: Project-based managed cybersecurity services (13-month RFP term)
Minimum experience: 7+ years
Role Purpose
Strengthen SOC detection and monitoring capabilities across SIEM, SOAR, EDR, DLP, email security, and other security platforms.
Key Responsibilities
· Develop and enhance security detection capabilities across SIEM, SOAR, EDR, DLP, and email security platforms.
· Design correlation logic, detection rules, threat-detection use cases, alerts, and supporting response workflows.
· Integrate telemetry and logs from security systems to improve monitoring coverage.
· Continuously tune detections to improve accuracy and reduce false positives.
· Analyze security events and suspicious activity and escalate validated threats through approved processes.
· Maintain SOC policies, procedures, workflows, and operational playbooks.
· Map detection coverage to MITRE ATT&CK and coordinate improvements with cybersecurity, governance, and technical teams.
· Support security assessments, regulatory compliance, reporting, and security-vendor coordination.
Technical and Professional Requirements
· Bachelor’s degree in Computer Science, Information Security, or a related field.
· At least 7 years of experience in SOC operations or cyber defense.
· Hands-on experience with SIEM, SOAR, EDR, DLP, email security gateways, and log/telemetry integration.
· Proven experience developing detection use cases and tuning security rules.
· Knowledge of cyberattack techniques, threat detection, MITRE ATT&CK, NCA requirements, and SOC operating models.
Personal Requirements
· Strong analytical and problem-solving skills.
· Clear communication, documentation, and cross-team coordination.
· Persistent, quality-focused, and comfortable working with vendors and technical partners.
· Able to prioritize alerts and improvements in a high-volume operational environment.
Professional Certifications
Preferred: CISSP, GCIA, GSEC, GCIH, CISM, or equivalent.