We are seeking a highly motivated and detail-oriented SOC Analyst (Level 1) to join our Security Operations Center team in Riyadh. The ideal candidate will be responsible for real-time monitoring, analysis, and response to security events and incidents. This is a hands-on role ideal for someone passionate about cybersecurity and eager to grow within a fast-paced security environment.
Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time
Key Responsibilities:
- Monitor and analyze security alerts from various security tools (SIEM, IDS/IPS, Antivirus, Firewall logs, etc.)
- Perform initial triage and investigation of security incidents.
- Escalate complex or critical incidents to Level 2/3 SOC analysts as per SOPs.
- Document and track incidents, events, and investigations using the ticketing system.
- Identify false positives and fine-tune alerting rules accordingly.
- Conduct basic threat intelligence research related to observed security events.
- Collaborate with internal IT teams to ensure timely incident resolution.
- Support vulnerability management and patching efforts as needed.
- Assist in preparing regular reports and metrics related to SOC activities.
Requirements:
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 1–2 years of experience in cybersecurity, preferably in a SOC environment.
- Basic knowledge of networking protocols, firewalls, IDS/IPS, and endpoint protection.
- Hands-on experience with at least one SIEM platform (e.g., Splunk, QRadar, ArcSight, etc.).
- Familiarity with MITRE ATT&CK framework is a plus.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work in shifts and under pressure.
