SOC Analyst – Level 3 Technical Lead

About the role

Eventus Security is looking for an experienced SOC Analyst Level 3 Technical Lead to drive advanced incident response, detection engineering, and automation within its 24/7 Security Operations Center in Jeddah. The role combines technical escalation authority with operational governance, ensuring continuous monitoring coverage and regulatory compliance.

Key responsibilities

• Lead high‑severity incident handling, conduct forensic investigations, and approve containment, eradication, and recovery actions.
• Design and execute proactive threat‑hunting campaigns and develop/optimise SIEM detection rules aligned with the MITRE ATT&CK framework.
• Create, review, and approve SOAR playbooks, ensuring automation workflows meet the Incident Response Plan.
• Integrate SIEM, EDR, threat‑intelligence, and SOAR platforms to improve mean‑time‑to‑recover (MTTR).
• Plan and maintain SOC shift rosters, manage analyst scheduling, and guarantee 24/7 coverage in line with NCA regulations.

Required profile

• Saudi nationals strongly preferred to meet nationalisation goals.
• Valid NCA Category A Certificate with at least three years of validity.
• Full compliance with the Saudi Cybersecurity Workforce Framework (SCyWF) for advanced incident handling, threat analysis, monitoring, and detection engineering.
• Willingness to support on‑call escalation and 24/7 SOC operations.
• Ability to provide executive‑level technical summaries and regulatory reporting inputs.

Required skills

• Hands‑on experience with Microsoft Sentinel, Splunk, and IBM QRadar SIEM platforms.
• Proficiency in SOAR solutions and automation workflow design.
• Deep knowledge of threat‑hunting techniques and MITRE ATT&CK mapping.
• Expertise in incident response, forensic investigation, and root‑cause analysis.
• Integration experience across SIEM, EDR, and threat‑intelligence tools.