SOC Analyst L1

Tata Consultancy Services; Al Khobar; On-site; SAR 60,000 - 80,000; Full time

Job summary

A leading company in IT services seeks a SOC Analyst L1 in Al Khobar, responsible for 24X7 monitoring of security alerts through SIEM. The ideal candidate will have expertise in Splunk, security incident investigation, and a solid understanding of security tools. This full-time role offers a competitive salary and opportunities for advancement in a dynamic environment.

Qualifications

• Expertise in Splunk for detection and tuning.
• Understanding of security tools like FireWalls and VPNs.
• Experience in security incident investigation.

Responsibilities

• Monitor SIEM Console for security alerts.
• Create SOC cases and resolve alerts per SOP.
• Publish daily and monthly SOC reports.

Skills

Team Skills

Splunk Expertise

Security Incident Investigation

Analytical Skills

Operating Systems Knowledge

Networking Understanding

Security Threats Knowledge

Security Tools Understanding

Tools

Wireshark

Job description

Job Title – SOC Analyst L1

Company – TCS (MEA)

Location – Al Khobar, Saudi Arabia

Job type – Full time

About Us :

Tata Consultancy Services (TCS) is an IT services, consulting and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 50 years. TCS offers a consulting-led, cognitive powered, integrated portfolio of business, technology and engineering services and solutions. This is delivered through its unique Location Independent Agile delivery model, recognized as a benchmark of excellence in software development.

A part of the Tata group, India's largest multinational business group, TCS has over 616,171 of the world’s best-trained consultants with 157 nationalities in 53 countries. For more information, visit www.tcs.com and follow TCS news at @TCS_News.

Job Description :

Must Have:

• Good team skills working with teams across geographies
• Expertise working with Splunk and able to identify tuning recommendations for improved detection and accuracy.
• Expert Splunk use-case/rules writing skills
• Expert Security Incident investigation and migration skills
• Expert analytical and problem-solving skills
• Good understanding of operating systems and networking
• Expert understanding of security threats and vulnerabilities
• Expert understanding of security tools and technologies such as FireWalls, VPN, IPS etc

Good-to-Have:

• DLP, anti-virus and anti-malware
• Use of system tools such as wireshark, ethereal, packet analyser etc
• Cloud computing
• SaaS models

Responsibility of / Expectations from the Role:

• 24X7 monitoring SIEM Console (Dashboards and Alerts) for security alerts
• Review alerts and security events
• Create SOC cases in ITSM tool & handle it as per documented procedures
• Resolve alerts as per documented SOP
• Escalate to Level 2 where further investigation and analysis is necessary
• Determine, document and report false positives events/alerts
• Publish daily, weekly and monthly SOC reports covering alerts and their corresponding status.
• Provide shift handover and updates to next shift personnel on SOC activities.
• Adherence to SOC SLAs, communication protocols and policies
• Document corrective and preventive actions for all IT security alerts in the knowledge base (KEDB)

Application Deadline: 15-Jul-2025

Privacy Note:

https://www.tcs.com/connect-with-tcs/privacy-policy