Detection Analyst

About the Detection Analyst Role at NourNet

NourNet is seeking a Detection Analyst to join our team in Riyadh. This full-time role focuses on enhancing our security posture by developing and optimizing detection capabilities across various security platforms. The analyst will play a key role in identifying and responding to security threats.

Role Overview

The Detection Analyst is responsible for the development, maintenance, and optimization of correlation rules, detection logic, dashboards, and reports within SIEM/XDR platforms. This involves continuous analysis of security data to improve detection effectiveness and minimize false positives.

Key Responsibilities

• Analyze alert patterns, security events, and incident data to identify detection gaps and tuning opportunities.
• Translate threat intelligence findings and incident response insights into actionable detection rules and use cases.
• Perform regression testing for new and updated detection rules to validate functionality, accuracy, and performance.
• Maintain comprehensive documentation for detection rules, including logic, data sources, expected behavior, and tuning history.
• Collaborate with Tier-1 and Tier-2 SOC analysts to gather feedback and continuously improve detection effectiveness.
• Map detection use cases and rules to the MITRE ATT&CK framework and applicable regulatory controls.
• Support the integration and optimization of detection and incident response workflows using Cortex XSOAR, where applicable.
• Support continuous improvement of detection coverage while minimizing false positives and improving alert quality.

Work Environment

This is a full-time position based in Riyadh. The Detection Analyst will work as part of a dedicated security team, collaborating with various internal stakeholders to maintain and enhance the organization's security posture.

Application Process

Candidates interested in this Detection Analyst position are encouraged to apply. Further details regarding the application process will be provided upon inquiry.