SOC Analyst

Clinical supervision is provided for staff working toward independent licensure.

Role overview:

We are creating this position because the workload has grown. The Cyber Defence team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Fully remote. You can work from anywhere in Saudi Arabia. You will need a reliable internet connection and a quiet place to work.

Your responsibilities:

Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint. Escalate confirmed incidents and follow the incident response plan. Document incidents with timeline, impact and root cause. Tune noisy detection rules with the security engineering team. Write and update SOC runbooks and playbooks.

Qualifications:

3+ years in an SOC, security analyst or IT security role. CompTIA Security+ or equivalent (or ability to obtain within six months). Basic scripting in PowerShell or Python. Experience reading Windows Event Logs, Sysmon and Linux logs.

Preferred:

KQL or SPL query writing. Malware analysis in a sandbox.

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Pay: SAR 20,000-SAR 25,000/month

What we offer:

Medical insurance. 30 days annual leave. Education allowance for children. Visa provided.

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Al Najd Medical Center Co..