Security Operations Center Analyst

About the Role

NourNet is seeking a CDC L1 SOC Analyst to join its Cyber Defense Center in Riyadh, Saudi Arabia. This full-time role serves as the initial line of defense against cyber threats, focusing on real-time security monitoring, alert triage, initial investigation, and timely escalation of potential security incidents. The analyst will perform first-response actions to mitigate immediate risks.

Key Responsibilities

• Monitor security alerts across various platforms, including SIEM, XDR, EDR, Firewall, IDS/IPS, WAF, and Email Security.
• Perform initial alert triage, validate events, identify false positives, and assign appropriate severity levels.
• Conduct basic investigations and enrich Indicators of Compromise (IOCs) using available threat intelligence sources.
• Execute authorized first-response actions, such as endpoint isolation, session termination, and temporary blocking.
• Escalate confirmed or suspicious incidents to Tier 2 / Incident Response teams following established procedures.
• Document investigation steps, findings, and actions accurately within the ticketing system.
• Adhere to SOC runbooks, playbooks, and escalation procedures.
• Maintain accurate shift handover reports, covering ongoing incidents, watch items, and operational updates.
• Participate in security simulations, training, and continuous improvement activities.

Qualifications and Education

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Hands-on exposure to SIEM platforms, such as XSIAM, Splunk, or QRadar.
• Basic experience in incident handling, phishing triage, and IOC enrichment.

Required Skills

• Understanding of SOC operations and shift-based monitoring.
• Strong analytical and problem-solving skills.
• Excellent attention to detail and documentation discipline.

Work Environment

This role requires the ability to work effectively in a 24x7 shift environment, contributing to continuous cyber defense operations.

Application

Candidates with a strong interest in cybersecurity, threat detection, and SOC operations who are looking to advance their career within a Cyber Defense Center are encouraged to apply.