We’re Hiring SOC Analyst

OverviewWe are hiring a SOC Analyst (L2) to handle advanced monitoring, incident investigation, response coordination, and automation within a 24/7 Security Operations Center, in full compliance with National Cybersecurity Authority (NCA) regulations.Must be based in Jeddah or willing to relocateMandatory Requirements (Audit-Critical)

• Valid NCA Category A Certificate (minimum 3 years)
• Compliance with Saudi Cybersecurity Workforce Framework (SCyWF)
• Verifiable certifications
• Willingness to work 24/7 shifts (nights, weekends, holidays)
• Adherence to NCA regulations (ECC, Incident Management, Workforce Controls)

Note: Non-compliance leads to disqualification.Key Responsibilities1. Incident HandlingInvestigate medium–high severity incidentsPerform root cause & impact analysisCorrelate logs across SIEM, EDR/XDR, and network toolsLead containment, eradication, and recovery2. Detection & AutomationDevelop and tune detection rulesReduce false positivesSupport SOAR automation and playbooksImprove SOC processes3. Documentation & ComplianceMaintain audit-ready documentation (evidence, timelines, RCA, remediation)Support NCA audits and regulatory reviews4. Team SupportGuide L1 analystsValidate escalations and severity levelsSupport knowledge sharing5. ReportingPrepare SOC reports (KPIs, SLA, trends)Present findings to stakeholdersParticipate in incident reviewsTechnical Requirements

• SIEM: Microsoft Sentinel, Splunk, IBM QRadar, Elastic
• SOAR: Playbooks, automation, workflow optimization
• EDR/XDR investigation
• Network security tools (Firewall, IDS/IPS)
• MITRE ATT&CK knowledge
• Log analysis (Windows, Linux, Cloud, Network)
• Automation & alert tuning
• Exposure to AI-driven security tools (plus)

Qualifications & Experience

• Bachelor’s in Cybersecurity / IT / Computer Science
• 3–5 years SOC experience
• Experience handling high-severity incidents
• Strong analytical and documentation skills