مهندس عمليات الأمن السيبراني (Cybersecurity Operations Engineer)

Job Summary

This role involves managing cybersecurity operations including incident response, security monitoring, and threat detection to protect organizational assets.

Responsibilities

• Conduct incident investigations and log analysis to detect and respond to threats.
• Manage escalations and security incidents within SOC or MSSP environments.
• Utilize SIEM, EDR/XDR, email security, vulnerability management, and network security tools.
• Apply knowledge of MITRE ATT&CK framework and incident-response methodologies.
• Perform threat hunting and security monitoring activities.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.
• More than 5 years of experience in cybersecurity operations, SOC, incident response, or security engineering.
• Hands-on experience with SIEM, EDR/XDR, email security, vulnerability management, and network-security technologies.
• Strong understanding of incident investigation, log analysis, threat detection, and response.
• Experience managing SOC or MSSP escalations and security incidents.
• Knowledge of MITRE ATT&CK, threat hunting, incident-response methodologies, and security monitoring principles.
• Experience with Microsoft security technologies, CrowdStrike, Qualys, Mimecast, Fortinet, or similar enterprise security platforms is preferred.
• Scripting or security automation experience using PowerShell, Python, or similar technologies is an advantage.
• Relevant certifications such as Security+, CySA+, GCIH, SC-200, GCIA, or equivalent are preferred.

We refresh listings regularly, but some roles close early on the source platform.