Security Operations Analyst – Multi‑Country SOC

About the role

The Security Operations Analyst/Admin will lead end‑to‑end cybersecurity operations for a highly regulated, multi‑country enterprise. Working inside a Security Operations Center, you will use SIEM, SOAR, EDR, NDR and XDR platforms to monitor, detect and respond to threats across infrastructure, cloud, Microsoft 365, endpoints and SAP S/4HANA.

Key responsibilities

• Operate and tune SIEM, SOAR, EDR, NDR and XDR solutions for real‑time threat detection and automated response.
• Manage Microsoft 365 E5 security suite, including Defender, Purview, DLP, MFA, Conditional Access and identity controls.
• Investigate security incidents, coordinate containment, perform root‑cause analysis and drive remediation.
• Support vulnerability management, penetration‑test remediation, patch governance and privileged‑access oversight.
• Monitor SAP security risks, segregation of duties and enterprise access‑governance controls.
• Ensure compliance with ISO 27001, GDPR, NCA, ITGC and regional audit requirements across KSA, the Middle East, Germany and India.
• Collaborate with infrastructure, GRC, audit, vendors and external partners to improve cyber‑resilience.
• Produce dashboards, reports and audit evidence on threats, vulnerabilities and remediation status.

Required profile

• 8–10 years of experience in cybersecurity operations or SOC environments.
• Strong background with enterprise security platforms and incident response.
• Experience in regulated sectors and familiarity with audit and compliance frameworks.

Required skills

• SIEM, SOAR, EDR, NDR, XDR platforms
• Microsoft 365 Defender, Purview, DLP, MFA, Conditional Access
• SAP S/4HANA security
• Vulnerability management and penetration‑test remediation
• Patch management
• Privileged Access Management