Security Analyst – Enterprise Threat Monitoring

About the role

We are hiring an experienced Security Analyst for our client in Khobar, Saudi Arabia to monitor, investigate, and respond to security alerts across a complex enterprise security environment. The role will work closely with a third‑party SOC, validating and actioning escalated security incidents while monitoring security tools and technologies that are not yet fully integrated into the SIEM.

Key responsibilities

• Review and action security alerts escalated by the third‑party SOC through Gurucul SIEM
• Monitor CrowdStrike EDR and SentinelOne consoles and investigate potential threats
• Analyze Vectra AI NDR alerts and identify suspicious network activity
• Review BeyondTrust PAM session logs and recordings for anomalous privileged access
• Monitor Cisco Duo for suspicious authentication activity involving internal and remote users
• Review Proofpoint email security alerts and phishing simulation results
• Monitor Cloudflare WAF/DDoS security events
• Review and prioritize vulnerabilities identified through CrowdStrike Spotlight and coordinate remediation
• Monitor security technologies including Forescout NAC and Nexthink
• Periodically review existing security solutions and policies and recommend improvements

Required skills

• EDR investigation and threat triage using CrowdStrike and/or SentinelOne
• NDR alert analysis using Vectra AI or equivalent platforms
• Familiarity with Forescout NAC
• PAM session monitoring using BeyondTrust
• MFA platforms such as Cisco Duo and Okta
• Email security operations using Proofpoint
• WAF/CDN security event monitoring using Cloudflare
• Familiarity with F5 technologies
• Strong understanding of incident response fundamentals
• Knowledge of the MITRE ATT&CK framework