Security Analyst - L3

Eventus Security; Jeddah; On-site; SAR 224,000 - 300,000; Full time

Job summary

A leading security firm in Jeddah is seeking a skilled Security Analyst - L3 to lead security investigations and manage SOC operations. The ideal candidate will have over 5 years of experience in cybersecurity, providing oversight in a 24/7 environment and ensuring efficient incident response. Responsibilities include threat detection, developing standard procedures, and mentoring junior analysts. This role requires strong technical expertise in EDR, XDR, and SIEM tools, as well as effective communication with global clients.

Qualifications

• 5+ years of experience in cybersecurity or a related field.
• Strong knowledge of security incident response processes and tools.
• Familiarity with SOC operations and threat hunting methodologies.

Responsibilities

• Lead high-priority security investigations and incident response.
• Oversee day-to-day SOC operations and ensure continuity.
• Act as the escalation point for complex security incidents.
• Conduct proactive threat hunting and enhance threat visibility.
• Develop standard operating procedures and incident response workflows.
• Interface with global stakeholders and provide clear incident briefings.
• Mentor L1 and L2 analysts and support skill development.
• Participate in tuning detection content and improving tool configurations.
• Ensure documentation of incidents, processes, and technical findings.

Skills

Security incident leadership

Threat detection and hunting

Technical expertise in EDR, XDR, SIEM

Operational oversight in SOC

Customer engagement

Collaboration and mentorship

Job description

Location: Jeddah

Experience: 5+ years

Send Your CV To: [e-mail]

Job Title: Security Analyst - L3

Key Responsibility Areas – Security Analyst - L3 – SOC

• Security Incident Leadership: Lead high-priority security investigations and incident response activities, ensuring accurate analysis, containment, remediation, and post-incident reporting.
• Operational Oversight: Oversee day-to-day SOC operations, including shift handovers, escalation management, and ensuring continuity across a 24/7 environment with global customers.
• Technical Expertise: Act as the escalation point for complex threats and security incidents requiring deep analysis of logs, packets, malware, and behavioral patterns using EDR, XDR, SIEM, and forensic tools.
• Threat Detection and Hunting: Conduct proactive threat hunting using various data sources and tools. Create and optimize detection use-cases, correlation rules, and playbooks to enhance threat visibility and reduce dwell time.
• Process & Playbook Management: Develop, refine, and enforce standard operating procedures (SOPs), playbooks, and incident response workflows to drive consistent and measurable outcomes.
• Customer Engagement: Interface with global stakeholders (especially US/Canada clients), providing clear incident briefings, RCA reports, and advisory support.
• Collaboration and Mentorship: Mentor L1 and L2 analysts, conduct training sessions, and support skill development across shifts.
• Continuous Improvement: Participate in tuning detection content, improving tool configurations, and supporting red/blue/purple team exercises to elevate SOC maturity.
• Documentation and Reporting: Ensure high-quality documentation of incidents, processes, and technical findings. Contribute to executive and operational reporting.