MSS L1 (Triage) analysts are first responders during security incidents (24/7/365). In this role, you will monitor the organization's network to identify potential threats and review SIEM alerts to categorize severity and issue types. Shift Leads will instruct the triage team on required actions. You will analyze payloads, validate IP reputations, ports, files, hashes, file paths, usernames, and other host details. Conduct quick searches on rule indexes and add possible artifacts to alerts based on extended research in the Glass console. Check historical records in the knowledge base for any similar past alerts and provide initial recommendations to stakeholders, escalating to XFTM L2 Analysts for detailed investigation if necessary. Additionally, you'll create tuning requests and suggest modifications to SIEM rules in case of false positives or excessive noise in client environments.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Location: Riyadh, Riyadh, Saudi Arabia
Work Arrangement: Hybrid
Employment Type: Fixed Term
Requirements:
- Bachelor's Degree
- Cloud-Based Solution Exposure: Experience providing 24/7 technical support for cloud-based solutions and familiarity with various applications, DevOps, middleware, security, and infrastructure components.
- Infrastructure Configuration Experience: Working knowledge of infrastructure and configuration as code using Ansible and Terraform, including administering Dev, Test, and Production environments.
- Database Administration Knowledge: Experience installing and configuring databases such as MYSQL, MSSQL, and PostgreSQL.
- Cloud Vendor Familiarity: Experience with load balancing and CDN options from multiple cloud vendors, including Azure Load Balancer and Application Gateway.
- IT Service Management Knowledge: Familiarity with ITIL processes and Integrated Service Level Management.
Preferred Technical and Professional Experience:
- Familiarity with Kubernetes: Managing Kubernetes nodes and experience with container orchestration and deployment.
- Knowledge of Microservices: Understanding of microservices architecture and experience with service discovery, API gateways, and service mesh.
- Experience with ICP Management: Managing ICP components, including infrastructure provisioning and deployment.
