About the Job: Tata Consultancy Services (TCS) is seeking a SOC Analyst L1 to join their team in Al Khobar, Eastern Saudi Arabia. This is a full-time role with an application deadline of 15-Jul-2025. TCS is an IT services, consulting, and business solutions organization that has been a trusted partner in the transformation journeys of many of the world’s largest businesses for over 50 years. Their consulting-led, cognitive powered, integrated portfolio of business, technology, and engineering services and solutions is distinguished by a unique Location Independent Agile™ delivery model, setting a benchmark of excellence in software development. As part of the Tata group, India’s largest multinational business group, TCS prides itself on having over 616,171 highly trained consultants from 157 nationalities across 53 countries. Job Description: Must-Have: - Good team skills working with teams across geographies - Expertise in working with Splunk and able to identify tuning recommendations for improved detection and accuracy - Expert Splunk use-case/rules writing skills - Expert in Security Incident investigation and migration - Expert analytical and problem-solving skills - Good understanding of operating systems and networking - Expert understanding of security threats and vulnerabilities - Expert knowledge of security tools and technologies such as Firewalls, VPN, IPS, etc. Good-to-Have: - Data Loss Prevention (DLP), anti-virus, and anti-malware - Familiarity with system tools such as Wireshark, Ethereal, packet analyzers, etc. - Cloud computing experience - Understanding of SaaS models Responsibilities / Expectations from the Role: - 24/7 monitoring of SIEM Console (Dashboards and Alerts) for security alerts - Review alerts and security events - Create SOC cases in the ITSM tool & handle them as per documented procedures - Resolve alerts according to documented SOPs - Escalate to Level 2 for further investigation and analysis when necessary - Determine, document, and report false positive events/alerts - Publish daily, weekly, and monthly SOC reports covering alerts and their corresponding status - Provide shift handover and updates to next shift personnel on SOC activities - Adhere to SOC SLAs, communication protocols, and policies - Document corrective and preventive actions for all IT security alerts in the knowledge base (KEDB) Language Requirements: Specific language requirements are not mentioned.
