Senior Cyber Operations Consultant – SOC L2 (Jeddah)

About the role

We are seeking a Senior Cyber Operations Consultant to join Deloitte’s Security Operations Centre (SOC) in Jeddah. The role focuses on Level‑2 detection and response for advanced threats, supporting both internal teams and client engagements.

Key responsibilities

• Compile detailed investigation and analysis reports for internal CSOC consumption and management.
• Analyze network traffic, IDS/IPS/DLP events, packet captures and firewall logs to identify malicious activity.
• Investigate and respond to advanced/targeted attacks, leading incident response efforts.
• Develop advanced Splunk queries and alerts to detect adversary actions and reduce false positives.
• Perform root‑cause analysis of security incidents and continuously improve detection processes.
• Identify infrastructure gaps by emulating attacker behaviours and recommend mitigations.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or a related field.
• 5‑8 years of overall experience with 3‑5 years in a similar SOC or incident‑response role.
• Saudi national (as specified).
• Fluent in English.

Required skills

• Incident response and resolution.
• SIEM platform expertise – Splunk.
• Threat detection and analysis.
• Scripting in Python and PowerShell.
• Knowledge of IDS/IPS, DLP, packet capture and firewall log analysis.
• Relevant certifications (GCIH, CySA+, SANS SEC503, CISSP).