CDC L1 SOC Analyst (Tier 1) – Real‑time Threat Monitoring

About the role

NourNet is seeking a CDC L1 SOC Analyst to join its Cyber Defense Center. The analyst will serve as the first line of defense, monitoring security events in real time, performing initial triage, and escalating incidents as needed.

Key responsibilities

• Monitor alerts across SIEM, XDR, EDR, firewalls, IDS/IPS, WAF and email security platforms.
• Perform initial triage, validate events, identify false positives and assign severity.
• Conduct basic investigations and enrich indicators of compromise using threat intelligence sources.
• Execute authorized first‑response actions such as endpoint isolation, session termination and temporary blocking.
• Escalate confirmed or suspicious incidents to Tier 2/Incident Response teams following established procedures.
• Document investigation steps, findings and actions accurately in the ticketing system.
• Maintain shift handover reports covering ongoing incidents and operational updates.
• Participate in security simulations, training and continuous improvement activities.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security or a related field.
• Basic experience (around 1 month) in incident handling, phishing triage and IOC enrichment.
• Understanding of SOC operations and ability to work in a 24×7 shift environment.
• Strong analytical, problem‑solving and documentation skills.
• Saudi citizenship is preferred.

Required skills

• XSIAM
• Splunk
• QRadar
• Microsoft Defender
• CrowdStrike
• SentinelOne
• Proofpoint
• Mimecast
• Microsoft 365 Defender
• ServiceNow
• JIRA
• Remedy