Security Operations Center Analyst

About the role

We are seeking an experienced L2 Security Monitoring Specialist to join a high‑profile, short‑term project in Saudi Arabia. The role is based in a 24/7 Security Operations Center (SOC) where you will monitor security events in real time, triage alerts, investigate incidents and ensure proper escalation.

Key responsibilities

• Monitor SIEM/SOAR dashboards and alert queues on a rotating 24/7 shift pattern.
• Perform L1/L2 triage and investigation of security alerts to determine genuine incidents.
• Correlate events across network, endpoint, identity and cloud log sources.
• Analyze logs and security events to identify Indicators of Compromise (IOCs).
• Execute documented detection use cases and incident‑response playbooks.
• Escalate confirmed or high‑confidence incidents to the L3 team with full evidence trails.
• Maintain detailed, auditable case documentation in the ticketing system.
• Track vulnerability and patch remediation activities and flag overdue items.
• Support incident‑response drills, tabletop exercises and shift handovers.
• Assist with onboarding new log sources into the SIEM environment.

Required profile

• Minimum 3 years of experience in a SOC, security monitoring or related cybersecurity operations role.
• Hands‑on experience with SIEM and/or SOAR platforms.
• Proven ability to triage alerts, investigate incidents and perform log analysis.
• Understanding of network, endpoint, identity and cloud security events.
• Experience following incident‑response processes and using playbooks.
• Strong analytical, problem‑solving and documentation skills.
• Willingness to work rotating 24/7 shifts and start within two weeks.

Required skills

• SIEM platforms (e.g., Microsoft Sentinel, Splunk, IBM QRadar)
• SOAR platforms
• EDR/XDR solutions
• Log analysis and correlation
• Incident‑response playbooks