Cyber Security Engineer – SOC Analyst (Riyadh)

About the role

We are seeking experienced Cyber Security Engineers to join our Security Operations Center (SOC) in Riyadh. The team monitors security events, investigates alerts, and supports incident response to protect the organization’s digital assets.

Key responsibilities

• Monitor security alerts and events using SIEM platforms and other monitoring tools.
• Investigate, triage, and analyze security incidents and suspicious activities.
• Perform initial incident investigation, escalation, containment, and remediation.
• Prepare incident reports and maintain security documentation.
• Consume threat‑intelligence feeds and identify emerging threats.
• Improve SOC processes, use cases, detection rules, and monitoring capabilities.
• Collaborate with IT and cybersecurity teams to resolve incidents.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field.
• Relevant hands‑on experience in a SOC environment (1‑5 years depending on the position).
• Strong analytical, problem‑solving and communication skills.
• Willingness to work onsite in rotational shifts.
• At least one recognized SOC/cybersecurity certification (e.g., CompTIA Security+, CySA+, EC‑Council CSA, GIAC, Microsoft SC‑200).

Required skills

• Proficiency with SIEM platforms (Microsoft Sentinel, Splunk, IBM QRadar, ArcSight).
• Knowledge of EDR/XDR, IDS/IPS, firewalls and vulnerability‑management tools.
• Familiarity with MITRE ATT&CK, threat‑intelligence and IOC analysis.
• Experience in incident response, security investigation, log analysis and alert triage.
• Understanding of TCP/IP, networking, Windows and Linux security, and common cyber threats.