Information Security Operations Specialist II

About the Opportunity
As an Information Security Operations Specialist II, you will be responsible for:

• SIEM, SOAR, and EDR Management:

  • Maintain and enhance security platforms, particularly Security Information and Event Management (SIEM) and Endpoint Detection & Response (EDR).
  • Develop and administer SOC controls, processes, procedures, and policies, ensuring their effectiveness and efficiency in the HungerStation environment.
  • Monitor and react to security events/incidents through predefined and prescriptive actions.
  • Conduct security event analysis to identify false positives and escalate events to CSIRT if needed.

• Threat Hunting:

  • Continuously monitor for the latest threats and implement rapid responses to mitigate potential damage from cyber attacks.
  • Proactively detect, isolate, and neutralize advanced threats that evade automated security solutions.

• Incident Response Management:

  • Lead and conduct incident detection, containment, eradication, and recovery procedures.
  • Develop security automation capabilities to decrease response times and streamline incident response operations.

• Governance and Resilience:

  • Follow all relevant policies, procedures, and processes for controlled and consistent work.
  • Contribute to identifying opportunities for continuous improvement of processes and productivity enhancement.

• Daily Operations:

  • Ensure continuity of work by following daily operational procedures.
  • Prepare timely and accurate reports related to the line of work.

Location
Riyadh, Saudi Arabia

Work Conditions
Temporary, On-Site

Requirements

• Completed degree in computer science or software engineering.
• 5+ years of experience in Security, preferably in a Cyber Security firm.
• Experience with log management tools and security event correlation.
• Familiarity with various Cloud platforms, including AWS, GCP, or Azure.
• Experience with SOAR tools, including playbook development and integration.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and Malware Analysis.
• Experience responding to attack vectors including malware, data exfiltration, DDoS, and phishing.
• Certifications like CEH, GCIH, GCIA are a plus.