Security Operations Center Analyst

Talent Blueprint FZ LLC; Jeddah; On-site; SAR 129,000 - 203,000; Part time

Job summary

Talent Blueprint FZ LLC in Saudi Arabia is seeking an experienced L2 Security Monitoring Specialist to join a 24/7 Security Operations Center for a short-term project from 1 December 2026 to 28 February 2027. The role focuses on real-time monitoring, alert triage, investigation, and escalation of security incidents.

You will monitor SIEM/SOAR dashboards, perform L1/L2 triage, correlate events across network, endpoint, identity, and cloud sources, and follow incident response playbooks.

Qualifications

• 3+ years in SOC, security monitoring or cybersecurity operations.
• Hands-on experience with SIEM and/or SOAR platforms.
• Strong in alert triage, incident investigation and log analysis.
• Experience with incident response processes and playbooks.
• Comfortable in 24/7 shift-based SOC environment.

Responsibilities

• Monitor SIEM/SOAR dashboards and 24/7 shift patterns.
• Perform L1/L2 triage and investigation of alerts.
• Correlate events across network, endpoint, identity, and cloud.
• Analyze logs to identify indicators of compromise.
• Execute security detection use cases and incident response playbooks.
• Escalate incidents to L3 with proper evidence trails.
• Maintain detailed case documentation in ticketing system.
• Track vulnerability and patch remediation and flag overdue items.
• Support incident response drills and shift handovers.
• Assist onboarding of new log sources into SIEM.
• Follow SOC procedures and escalation protocols.

Skills

SOC operations

SIEM/SOAR

Incident triage

Log analysis

Incident response

24/7 shift

Documentation

Analytical skills

Tools

Microsoft Sentinel

Splunk

IBM QRadar

SOAR platforms

EDR/XDR

Job description

Saudi Arabia

Project Duration: 1 December 2026 – 28 February 2027

Project-Based / Fixed-Term Role

Immediate / Short Notice Availability Preferred

We are looking for an experienced L2 Security Monitoring Specialist to join a high-profile project in Saudi Arabia. The successful candidate will work as part of a 24/7 Security Operations Center (SOC), responsible for real-time security monitoring, alert triage, investigation, and escalation of potential security incidents.

This is a project-based, fixed-term opportunity running from 1 December 2026 to 28 February 2027.

Key Responsibilities

• Monitor SIEM/SOAR dashboards and alert queues as part of a rotating 24/7 shift pattern.
• Perform L1/L2 triage and investigation of security alerts to determine whether activity represents a genuine security incident.
• Correlate events across network, endpoint, identity, and cloud log sources.
• Analyze logs and security events to identify Indicators of Compromise (IOCs) and distinguish genuine threats from benign activity.
• Execute documented security detection use cases and incident response playbooks.
• Escalate confirmed or high-confidence incidents to the L3 Security team, ensuring a complete and accurate evidence trail.
• Maintain detailed and auditable case documentation within the ticketing/case management system.
• Track vulnerability and patch remediation activities and flag overdue items where required.
• Support incident response drills, tabletop exercises, and shift handovers.
• Assist with the onboarding and integration of new log sources into the SIEM environment.
• Follow established SOC procedures, incident response processes, and security escalation protocols.

Requirements

• 3+ years of experience in SOC, security monitoring, cybersecurity operations, or a closely related role.
• Hands-on experience with SIEM and/or SOAR platforms.
• Strong experience in security alert triage, incident investigation, and log analysis.
• Understanding of network, endpoint, identity, and cloud security events.
• Experience working with incident response processes and security playbooks.
• Ability to identify and investigate suspicious activity and potential indicators of compromise.
• Strong documentation and evidence-gathering skills.
• Comfortable working in a 24/7 shift-based SOC environment.
• Strong analytical and problem-solving skills.
• Ability to work effectively under time-sensitive conditions and escalation incidents appropriately.

Preferred Background

Candidates with experience using platforms such as Microsoft Sentinel, Splunk, IBM QRadar, SOAR platforms, EDR/XDR solutions, or similar security technologies are encouraged to apply.

Important Project Details

• Project Duration: 1 December 2026 – 28 February 2027
• Contract Type: Project-Based / Fixed-Term
• (Saudi Nationals): Highly preferred
• Availability: Candidates who can start within 2 weeks or sooner will be strongly preferred.
• Candidates must be comfortable committing to a short-term project-based assignment and working a rotating 24/7 shift pattern.

If you have hands-on SOC experience and are available for a project-based opportunity in Saudi Arabia, we would be interested in hearing from you.