SOC Analyst L1

IT-Security C&T; Saudi Arabia; On-site; SAR 120,000 - 180,000; Full time

Job summary

IT-Security C&T in Saudi Arabia seeks a Security Analyst to join the 24x7 security operations team. You will monitor, detect, and respond to information security incidents across IT and business units, and coordinate with IT teams to surface actionable remediation.

The role requires a Bachelor's in IT or Engineering and 1+ years in IT/security operations or SOC, plus knowledge of SIEM, networks, and security controls. Certifications like CEH or CPTE are a plus.

Qualifications

• Bachelor's degree in IT or Engineering and 1+ years in IT/security operations or SOC.
• Security certifications (CEH, CPTE, CIHE) or equivalent preferred.

Responsibilities

• Monitor the 24x7 security operation team and SIEM for security incidents and events.
• Respond to incidents and report on handling and resolution.
• Participate in forensic analysis and data recovery activities.
• Conduct daily security analysis, vulnerability assessment, and risk reviews.
• Promote security initiatives and implement recommended controls.
• Follow policies and SOPs to ensure controlled, consistent work.

Skills

SOC operations

Incident handling

Security monitoring

Forensic analysis

Threat detection

Networking basics

Security awareness

Education

Bachelor's degree in IT or Engineering

Security certifications (CIHE, CEH, CPTE, or equivalent)

Tools

SIEM

Firewalls/routers

Linux security

Windows security

Networking equipment (switches/routers)

Job description

The Security Analyst will participate and be part of information security monitoring and incident handling team in order to monitor and manage all information security incidents and risks and solve them as per the business security requirements The Security Analyst will work and follow-up with the IT Teams and other Business Units to develop action plans to mitigate identified vulnerabilities and promote security initiatives

Key Activities Include

• Work as part of 24x7 security operation team
• Monitor the Security Information and Event Management System SIEM and follow up all related security incidents and events
• Follow the day-to-day operations related to own job to ensure continuity of work
• Respond to security incidents and report on incident handling and resolution
• Participate in forensic analysis and data recovery and penetration testing
• Perform daily security analysis and scanning and assessment for information security risks threats and vulnerabilities
• Proactive research to identify and understand new threats vulnerabilities and exploits
• Configuration and administration of security systems and tools
• Define and evaluate security technologies required to ensure safe technology operation and detection of cyber-attack
• Provide the security recommendations on actions which assist in improving security posture within CLIENT Environment
• Follow all relevant departmental policies processes standard operating procedures and instructions so that work is carried out in a controlled and consistent manner
• Participating in reviewing and documenting computer security and emergency gate identified vulnerabilities and promote security initiatives

Qualifications

• Bachelor s degree in IT, Engineering1+ years of experience in IT/Security operations or SOC role.
• Network+, CCNA R&S, Security +, Linux security , windows security or forensics training is plus.
• Professional Security certification preferred ( CIHE , CEH, CPTE , or equivalent).
• Knowledge and experience in network switches, routers and firewalls
• Knowledge of Microsoft Word, Project, Excel, Access,