Senior Security Operations Engineer

Job Overview

Job Responsibilities

• Execute and maintain the security operations processes, procedures, and checklists defined by Tencent Cloud's security and compliance teams; track tasks and tickets through to closure.
• Monitor security alerts, vulnerabilities, and risk items; perform initial triage, escalate to the appropriate owners, and keep risk and issue trackers accurate and up to date.
• Support incident response activities under guidance, including collecting and preserving evidence, maintaining incident timelines, coordinating with responders, and drafting incident reports and post-incident summaries.
• Assist with the periodic review and upkeep of cybersecurity and privacy policies, procedures, guidelines, and compliance evidence so documentation stays current and audit-ready.
• Prepare regular operational reports and dashboards on security posture, open risks, remediation progress, and compliance status for internal stakeholders.
• Support security awareness activities, internal communications, and the preparation of security documentation and questionnaire responses for customers and partners.

Qualifications and Requirements

• Bachelor's degree, or equivalent practical experience.
• 3-5 years of hands-on experience in security operations, IT operations, data security, privacy, or compliance support; internships and graduate programmes count.
• Working knowledge of common security operations tasks: alert monitoring, vulnerability management, access and entitlement review, log review, and incident documentation.
• Familiarity with cloud services and common security technologies such as IAM, network security controls, encryption, SIEM, and endpoint protection; exposure to any major cloud platform is a plus.
• Familiarity with information security and privacy standards and frameworks such as ISO 27001, NIST CSF, or PCI DSS; experience supporting audits or certification activities is a plus.
• Basic awareness of information security and personal data protection requirements in Saudi Arabia, such as SAMA Cybersecurity Framework, PDPL, and NCA controls, and a willingness to build deeper regulatory knowledge on the job.
• Clear written and verbal communication in English; Arabic is a plus.
• Detail-oriented, comfortable working with process, documentation, and cross-team coordination.
• Entry-level certifications such as Security+, CC, or ISO 27001 Foundation are a plus, not a requirement.

About CSIG