محلل مركز عمليات الأمن

We are seeking a dedicated and skilled SOC Analyst to join our dynamic security operations team in Saudi Arabia. This is a Permanent position where you will play a crucial role in safeguarding our organization's digital assets by actively monitoring, detecting, and responding to security threats. If you are passionate about cybersecurity and possess a keen eye for detail, this is an excellent opportunity to contribute to a secure and robust IT environment.

Key Responsibilities

• Monitor SIEM systems for security alerts and anomalies, investigating potential incidents in real-time.
• Execute incident response procedures to contain, eradicate, and recover from security breaches.
• Conduct proactive threat hunting exercises to identify and mitigate advanced persistent threats.
• Perform vulnerability assessments and penetration testing to identify and prioritize security weaknesses.
• Analyze security logs from various sources, including firewalls, IDS/IPS, and endpoints, to detect malicious activity.
• Develop and maintain security documentation, including incident reports and playbooks.
• Utilize scripting languages like Python or Bash for automation of security tasks and data analysis.

Required Qualifications

Experience & Education

• Bachelor of Science or Bachelor of Computer Science (BCS) degree.
• 1 to 3 years of professional experience in a Security Operations Center (SOC) or a related cybersecurity role.

Skills & Certifications

• Proven experience with SIEM platforms such as Splunk, QRadar, or ELK Stack.
• Proficiency in incident response methodologies and procedures.
• Demonstrated ability in threat hunting and vulnerability assessment.
• Strong understanding of network security principles, including firewalls and intrusion detection systems.
• Experience with endpoint security solutions and malware analysis.
• Familiarity with log analysis and forensic investigation techniques.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and teamwork abilities, with meticulous attention to detail.
• Proficiency in Python or Bash scripting is essential.
• CompTIA Security+, CEH, or GIAC GSEC certification is required.

Preferred Qualifications

• Experience with packet analysis tools.
• Familiarity with firewall management.
• Fluency in English is preferred.