SOC analyst

About the Role

NourNet is seeking a full-time SOC Analyst to join its team in Riyadh. This role operates within the CDC Tier-1 framework, providing 24x7 monitoring and initial triage of security events. The SOC Analyst acts as the organization's first line of defense, responsible for validating alerts, executing predefined first-response actions, and escalating potential incidents according to established criteria.

Primary Objective

The primary objective of this position is to deliver continuous monitoring, triage, and first-response actions across SOC platforms. This ensures the timely detection and escalation of security threats, maintaining the security posture of the organization.

Key Responsibilities

• Perform real-time alert monitoring across various security tools, including SIEM, XDR, EDR, firewall, IDS/IPS, WAF, and email security.
• Conduct initial triage of security alerts, which involves validating events, removing false positives, assigning severity levels, and categorizing incidents.
• Execute first-response actions such as endpoint isolation via EDR, session termination, and temporary blocks within defined authority.
• Escalate incidents to Tier-2 analysts or the IR Lead based on established thresholds and escalation criteria.
• Ensure ticketing and thorough documentation of all investigative steps within the incident management system.
• Adhere to runbooks and contribute to workflow improvements by identifying gaps or outdated procedures.
• Facilitate shift handover, including accurate logs of ongoing cases, watch items, and operational notes.
• Participate in continuous training and simulations to maintain detection readiness and enhance triage skills.

Work Type

This is a full-time position based in Riyadh.

About NourNet

NourNet is a company committed to delivering robust security solutions. The SOC Analyst will be an integral part of a team dedicated to maintaining continuous security monitoring and incident response capabilities.