Brain Station 23

Senior Cybersecurity Engineer

  • Mohakhali
  • office
  • senior

Job description

Senior Cybersecurity Engineer

Location: Mohakhali

Years of experience: six (6) years

Billable status: Billed

Role overview

We are seeking an experienced Senior Cybersecurity Engineer to lead detection, response, and hardening efforts across client and internal environments. This role owns EDR/XDR operations, Oracle Cloud Infrastructure (OCI) security, SIEM platforms, and PAM administration, while ensuring engagements align with NCA and SAMA cybersecurity requirements.

The ideal candidate is a hands-on senior practitioner who can both execute independently and mentor junior engineers, integrating security natively into infrastructure and cloud initiatives.

Core responsibilities

  • Implement, manage, and fine-tune EDR/XDR platforms across client and internal environments to detect, investigate, and respond to advanced threats.
  • Design, secure, and manage OCI (Oracle Cloud Infrastructure) security services, including IAM, network security, and workload protection.
  • Deploy, manage, and optimize SIEM platforms, including Wazuh and Splunk, for log aggregation, correlation, and threat detection.
  • Administer and maintain PAM solutions, including Teleport, to enforce least-privilege access and secure privileged sessions.
  • Lead vulnerability management programs, including scanning, risk-based prioritization, remediation tracking, and reporting.
  • Perform security hardening of servers, endpoints, and cloud workloads against recognized benchmarks (e.g., CIS).
  • Lead incident response efforts end-to-end — detection, containment, eradication, and post-incident review.
  • Collaborate with cross-functional teams to embed security into infrastructure and cloud initiatives.
  • Assist in any ad-hoc tasks as and when assigned by the immediate superior.

Required qualifications & skills

  • Candidate must possess a minimum of six (6) years of hands-on experience in cybersecurity engineering or security operations roles.
  • Proven experience implementing and managing EDR/XDR platforms in production environments.
  • Strong working knowledge of OCI (Oracle Cloud Infrastructure) security services and architecture.
  • Hands-on experience with SIEM platforms, particularly Wazuh and Splunk.
  • Experience deploying and managing PAM solutions, particularly Teleport.
  • Demonstrated experience in vulnerability management, security hardening (CIS Benchmarks or equivalent), and incident response.
  • Working knowledge of NCA (National Cybersecurity Authority) and SAMA (Saudi Central Bank) cybersecurity frameworks and requirements.
  • Strong analytical, problem-solving, and incident-handling capabilities under pressure.
  • Possess initiative, good interpersonal, and communication skills, with the ability to mentor junior team members.
  • Excellent command of written and spoken English.

Nice to have

  • Relevant certifications preferred (e.g., OSCP, GCIH, CISSP, CEH, or cloud security certifications).

Skills

Cloud & Infra
  • Oracle Cloud Infrastructure (OCI)
  • IAM
  • Network Security
  • Cloud Security
Tools & Platforms
  • Wazuh
  • Splunk
  • Teleport
  • EDR / XDR
  • SIEM
  • PAM
Soft skills
  • Analytical Skills
  • Problem-solving
  • Incident Handling
  • Mentoring
  • Communication

Role overview

We are seeking an experienced Senior Cybersecurity Engineer to lead detection, response, and hardening efforts across client and internal environments. This role owns EDR/XDR operations, Oracle Cloud Infrastructure (OCI) security, SIEM platforms, and PAM administration, while ensuring engagements align with NCA and SAMA cybersecurity requirements.

The ideal candidate is a hands-on senior practitioner who can both execute independently and mentor junior engineers, integrating security natively into infrastructure and cloud initiatives.

Responsibilities

  • Implement, manage, and fine-tune EDR/XDR platforms across client and internal environments to detect, investigate, and respond to advanced threats.
  • Design, secure, and manage OCI (Oracle Cloud Infrastructure) security services, including IAM, network security, and workload protection.
  • Deploy, manage, and optimize SIEM platforms, including Wazuh and Splunk, for log aggregation, correlation, and threat detection.
  • Administer and maintain PAM solutions, including Teleport, to enforce least-privilege access and secure privileged sessions.
  • Lead vulnerability management programs, including scanning, risk-based prioritization, remediation tracking, and reporting.
  • Perform security hardening of servers, endpoints, and cloud workloads against recognized benchmarks (e.g., CIS).
  • Lead incident response efforts end-to-end — detection, containment, eradication, and post-incident review.
  • Collaborate with cross-functional teams to embed security into infrastructure and cloud initiatives.
  • Assist in any ad-hoc tasks as and when assigned by the immediate superior.

Required qualifications

  • Candidate must possess a minimum of six (6) years of hands-on experience in cybersecurity engineering or security operations roles.
  • Proven experience implementing and managing EDR/XDR platforms in production environments.
  • Strong working knowledge of OCI (Oracle Cloud Infrastructure) security services and architecture.
  • Hands-on experience with SIEM platforms, particularly Wazuh and Splunk.
  • Experience deploying and managing PAM solutions, particularly Teleport.
  • Demonstrated experience in vulnerability management, security hardening (CIS Benchmarks or equivalent), and incident response.
  • Working knowledge of NCA (National Cybersecurity Authority) and SAMA (Saudi Central Bank) cybersecurity frameworks and requirements.
  • Strong analytical, problem-solving, and incident-handling capabilities under pressure.
  • Possess initiative, good interpersonal, and communication skills, with the ability to mentor junior team members.
  • Excellent command of written and spoken English.

Nice to have

  • Relevant certifications preferred (e.g., OSCP, GCIH, CISSP, CEH, or cloud security certifications).

Skills

Oracle Cloud Infrastructure (OCI)IAMNetwork SecurityCloud SecurityWazuhSplunkTeleportEDR / XDRSIEMPAMAnalytical SkillsProblem-solvingIncident HandlingMentoringCommunication