SOC Analyst (L2) for 3-Month Project — 24/7 Shifts

Talent Blueprint FZ LLC; Jeddah; On-site; SAR 129,000 - 203,000; Part time

Job summary

Talent Blueprint FZ LLC in Saudi Arabia is seeking an experienced L2 Security Monitoring Specialist to join a 24/7 Security Operations Center for a short-term project from 1 December 2026 to 28 February 2027. The role focuses on real-time monitoring, alert triage, investigation, and escalation of security incidents.

You will monitor SIEM/SOAR dashboards, perform L1/L2 triage, correlate events across network, endpoint, identity, and cloud sources, and follow incident response playbooks.

Qualifications

• 3+ years in SOC, security monitoring or cybersecurity operations.
• Hands-on experience with SIEM and/or SOAR platforms.
• Strong in alert triage, incident investigation and log analysis.
• Experience with incident response processes and playbooks.
• Comfortable in 24/7 shift-based SOC environment.

Responsibilities

• Monitor SIEM/SOAR dashboards and 24/7 shift patterns.
• Perform L1/L2 triage and investigation of alerts.
• Correlate events across network, endpoint, identity, and cloud.
• Analyze logs to identify indicators of compromise.
• Execute security detection use cases and incident response playbooks.
• Escalate incidents to L3 with proper evidence trails.
• Maintain detailed case documentation in ticketing system.
• Track vulnerability and patch remediation and flag overdue items.
• Support incident response drills and shift handovers.
• Assist onboarding of new log sources into SIEM.
• Follow SOC procedures and escalation protocols.

Skills

SOC operations

SIEM/SOAR

Incident triage

Log analysis

Incident response

24/7 shift

Documentation

Analytical skills

Tools

Microsoft Sentinel

Splunk

IBM QRadar

SOAR platforms

EDR/XDR

Job description

Talent Blueprint FZ LLC in Saudi Arabia is seeking an experienced L2 Security Monitoring Specialist to join a 24/7 Security Operations Center for a short-term project from 1 December 2026 to 28 February 2027. The role focuses on real-time monitoring, alert triage, investigation, and escalation of security incidents.

You will monitor SIEM/SOAR dashboards, perform L1/L2 triage, correlate events across network, endpoint, identity, and cloud sources, and follow incident response playbooks.