Senior Security Operations Engineer

About the Role

Key Responsibilities

• Execute and maintain security operations processes, procedures, and checklists defined by Tencent Cloud's security and compliance teams, tracking tasks and tickets to closure.
• Monitor security alerts, vulnerabilities, and risk items; perform initial triage, escalate to appropriate owners, and ensure risk and issue trackers are accurate and current.
• Support incident response activities under guidance, including collecting and preserving evidence, maintaining incident timelines, coordinating with responders, and drafting incident reports and post-incident summaries.
• Assist with the periodic review and upkeep of cybersecurity and privacy policies, procedures, guidelines, and compliance evidence to ensure documentation remains current and audit-ready.
• Prepare regular operational reports and dashboards on security posture, open risks, remediation progress, and compliance status for internal stakeholders.
• Support security awareness activities, internal communications, and the preparation of security documentation and questionnaire responses for customers and partners.

Qualifications and Experience

• Bachelor's degree, or equivalent practical experience.
• 3–5 years of hands-on experience in security operations, IT operations, data security, privacy, or compliance support. Internships and graduate programs are considered.
• Working knowledge of common security operations tasks, including alert monitoring, vulnerability management, access and entitlement review, log review, and incident documentation.
• Familiarity with cloud services and common security technologies (, IAM, network security controls, encryption, SIEM, endpoint protection). Exposure to any major cloud platform is an advantage.
• Familiarity with information security and privacy standards and frameworks such as ISO 27001, NIST CSF, or PCI DSS. Experience supporting audits or certification activities is a plus.
• Basic awareness of information security and personal data protection requirements in Saudi Arabia (, SAMA Cybersecurity Framework, PDPL, NCA controls) and a willingness to build deeper regulatory knowledge on the job.
• Required Skills
• Detail-oriented approach to work.
• Comfortable working with processes, documentation, and cross-team coordination.
• Entry-level certifications (Security+, CC, ISO 27001 Foundation) are a plus, but not a requirement.

Work Environment

• This role is based in the Kingdom of Saudi Arabia and operates as an individual contributor, focusing on operational execution rather than people management or strategic ownership.