SOC Analyst (L2) – Security Operations Center

About the role

We are looking for a Level‑2 Security Operations Center (SOC) Analyst to join Circlys’ security team in Riyadh. You will be the first line of defense, continuously monitoring our environment and responding to security incidents to protect our fintech platform.

Key responsibilities

• Monitor security events using SIEM and EDR tools and identify potential threats.
• Investigate and triage alerts, ensuring timely containment and remediation.
• Develop, tune and maintain detection rules, use‑cases and incident‑response playbooks.
• Collaborate with IT and engineering teams to integrate new log sources and improve overall security posture.
• Perform proactive threat analysis and produce accurate documentation and reports.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 2 years of experience in a SOC or IT security monitoring role.
• Relevant certifications such as Security+, CySA+, GCIH or CEH are a plus.
• Strong analytical mindset, attention to detail and effective communication skills.

Required skills

• Hands‑on experience with SIEM platforms.
• Experience with Endpoint Detection and Response (EDR) solutions.
• Knowledge of networking fundamentals and incident handling processes.
• Ability to create and optimise detection rules and use‑cases.