Security Operations Center Analyst (L2)

About the role

The Security Operations Center Analyst (L2) joins Circlys’ fast‑growing fintech team in Riyadh, acting as the first line of defense against cyber threats. You will continuously monitor SIEM and EDR platforms, investigate alerts, and coordinate response actions to protect the company’s digital assets.

Key responsibilities

• Monitor and analyze security events using SIEM and EDR platforms to detect and respond to potential threats.
• Perform investigation and response activities to ensure timely containment and remediation.
• Develop and optimize detection rules, use cases, and incident response playbooks.
• Collaborate with IT and engineering teams to maintain system security and incident readiness.
• Conduct proactive threat analysis and maintain accurate documentation and reports.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• At least 2 years of experience in a SOC or IT security monitoring role.
• Relevant certifications such as Security+, CySA+, GCIH or CEH are a plus.
• Strong analytical, technical and communication skills with attention to detail.

Required skills

• SIEM platforms
• EDR platforms
• Detection rules and use‑case development
• Networking fundamentals
• Detection frameworks
• Incident response playbooks
• Incident handling and triage