Job description
Senior Cybersecurity Engineer
Location: Mohakhali
Years of experience: six (6) years
Billable status: Billed
Role overview
We are seeking an experienced Senior Cybersecurity Engineer to lead detection, response, and hardening efforts across client and internal environments. This role owns EDR/XDR operations, Oracle Cloud Infrastructure (OCI) security, SIEM platforms, and PAM administration, while ensuring engagements align with NCA and SAMA cybersecurity requirements.
The ideal candidate is a hands-on senior practitioner who can both execute independently and mentor junior engineers, integrating security natively into infrastructure and cloud initiatives.
Core responsibilities
- Implement, manage, and fine-tune EDR/XDR platforms across client and internal environments to detect, investigate, and respond to advanced threats.
- Design, secure, and manage OCI (Oracle Cloud Infrastructure) security services, including IAM, network security, and workload protection.
- Deploy, manage, and optimize SIEM platforms, including Wazuh and Splunk, for log aggregation, correlation, and threat detection.
- Administer and maintain PAM solutions, including Teleport, to enforce least-privilege access and secure privileged sessions.
- Lead vulnerability management programs, including scanning, risk-based prioritization, remediation tracking, and reporting.
- Perform security hardening of servers, endpoints, and cloud workloads against recognized benchmarks (e.g., CIS).
- Lead incident response efforts end-to-end — detection, containment, eradication, and post-incident review.
- Collaborate with cross-functional teams to embed security into infrastructure and cloud initiatives.
- Assist in any ad-hoc tasks as and when assigned by the immediate superior.
Required qualifications & skills
- Candidate must possess a minimum of six (6) years of hands-on experience in cybersecurity engineering or security operations roles.
- Proven experience implementing and managing EDR/XDR platforms in production environments.
- Strong working knowledge of OCI (Oracle Cloud Infrastructure) security services and architecture.
- Hands-on experience with SIEM platforms, particularly Wazuh and Splunk.
- Experience deploying and managing PAM solutions, particularly Teleport.
- Demonstrated experience in vulnerability management, security hardening (CIS Benchmarks or equivalent), and incident response.
- Working knowledge of NCA (National Cybersecurity Authority) and SAMA (Saudi Central Bank) cybersecurity frameworks and requirements.
- Strong analytical, problem-solving, and incident-handling capabilities under pressure.
- Possess initiative, good interpersonal, and communication skills, with the ability to mentor junior team members.
- Excellent command of written and spoken English.
Nice to have
- Relevant certifications preferred (e.g., OSCP, GCIH, CISSP, CEH, or cloud security certifications).
Skills
Cloud & Infra- Oracle Cloud Infrastructure (OCI)
- IAM
- Network Security
- Cloud Security
- Wazuh
- Splunk
- Teleport
- EDR / XDR
- SIEM
- PAM
- Analytical Skills
- Problem-solving
- Incident Handling
- Mentoring
- Communication
Role overview
We are seeking an experienced Senior Cybersecurity Engineer to lead detection, response, and hardening efforts across client and internal environments. This role owns EDR/XDR operations, Oracle Cloud Infrastructure (OCI) security, SIEM platforms, and PAM administration, while ensuring engagements align with NCA and SAMA cybersecurity requirements.
The ideal candidate is a hands-on senior practitioner who can both execute independently and mentor junior engineers, integrating security natively into infrastructure and cloud initiatives.
Responsibilities
- Implement, manage, and fine-tune EDR/XDR platforms across client and internal environments to detect, investigate, and respond to advanced threats.
- Design, secure, and manage OCI (Oracle Cloud Infrastructure) security services, including IAM, network security, and workload protection.
- Deploy, manage, and optimize SIEM platforms, including Wazuh and Splunk, for log aggregation, correlation, and threat detection.
- Administer and maintain PAM solutions, including Teleport, to enforce least-privilege access and secure privileged sessions.
- Lead vulnerability management programs, including scanning, risk-based prioritization, remediation tracking, and reporting.
- Perform security hardening of servers, endpoints, and cloud workloads against recognized benchmarks (e.g., CIS).
- Lead incident response efforts end-to-end — detection, containment, eradication, and post-incident review.
- Collaborate with cross-functional teams to embed security into infrastructure and cloud initiatives.
- Assist in any ad-hoc tasks as and when assigned by the immediate superior.
Required qualifications
- Candidate must possess a minimum of six (6) years of hands-on experience in cybersecurity engineering or security operations roles.
- Proven experience implementing and managing EDR/XDR platforms in production environments.
- Strong working knowledge of OCI (Oracle Cloud Infrastructure) security services and architecture.
- Hands-on experience with SIEM platforms, particularly Wazuh and Splunk.
- Experience deploying and managing PAM solutions, particularly Teleport.
- Demonstrated experience in vulnerability management, security hardening (CIS Benchmarks or equivalent), and incident response.
- Working knowledge of NCA (National Cybersecurity Authority) and SAMA (Saudi Central Bank) cybersecurity frameworks and requirements.
- Strong analytical, problem-solving, and incident-handling capabilities under pressure.
- Possess initiative, good interpersonal, and communication skills, with the ability to mentor junior team members.
- Excellent command of written and spoken English.
Nice to have
- Relevant certifications preferred (e.g., OSCP, GCIH, CISSP, CEH, or cloud security certifications).
