Information Security Incident Response Professional

About the role

Mobily is seeking an experienced Information Security Incident Response Professional to join its security team in Riyadh. The role will lead the handling of cyber security events, from detection through remediation, ensuring seamless coordination across the organization.

Key responsibilities

• Facilitate the incident management process and integrate response activities with other security functions.
• Investigate, triage and escalate complex or high‑severity security threats.
• Gather and document evidence, produce incident reports and maintain accurate records.
• Perform intrusion scope analysis, root‑cause investigations and support remediation actions.
• Conduct daily operational briefings for SOC staff and provide situational updates to management.
• Analyze threat campaigns, extract indicators of compromise and recommend process improvements.
• Collaborate with IT and Network Operations to resolve critical incidents.
• Monitor and audit malicious activity reported to the SOC.
• Perform additional duties as directed by senior leadership.

Required profile

• Proven experience working in a SOC, CERT or CIRT environment.
• Strong understanding of network fundamentals and common Internet protocols.
• Hands‑on experience with security event log analysis and SIEM platforms, preferably ArchSight.
• Demonstrated ability to develop and implement counter‑measures in enterprise networks.
• Solid knowledge of the current threat landscape and attack vectors.

Required skills

• Security Operations Center (SOC) experience
• Computer Emergency Response Team (CERT) or Computer Incident Response Team (CIRT) experience
• Security Information and Event Monitoring (SIEM) platforms
• ArchSight (minimum one year hands‑on)
• Network fundamentals and Internet protocols
• System forensics and investigation (file system, memory, processes, network connections)