SOC Analyst L

About the Role

Jobmaze is seeking an experienced SOC Analyst – L3 for a client in Riyadh, Saudi Arabia. This full-time role involves leading advanced security investigations, incident response, threat hunting, and SIEM detection engineering. The ideal candidate will possess strong technical expertise in SOC operations, incident handling, threat intelligence, and security monitoring.

Role Overview

The SOC Analyst – L3 will manage complex security incidents and serve as a technical escalation point. This position requires the ability to lead end-to-end incident response processes and mentor junior analysts, ensuring robust security posture and continuous improvement of security operations.

Key Responsibilities

• Act as the technical escalation point for complex and high-severity security incidents.
• Lead end-to-end incident response, including investigation, containment, eradication, and recovery.
• Conduct advanced threat hunting across endpoints, networks, cloud environments, and security logs.
• Perform malware analysis, memory forensics, and root cause investigations.
• Design, develop, and optimize SIEM detection use cases aligned with the MITRE ATT&CK framework.
• Develop correlation rules, dashboards, and automated security workflows.
• Integrate threat intelligence, IOCs, and behavioral detection patterns into SIEM.
• Identify detection gaps, improve log visibility, and reduce false positives.
• Lead Purple Team exercises and SOC maturity improvements.
• Mentor L1 and L2 analysts and coordinate with IT, GRC, and management during major incidents.

Qualifications and Experience

• Proven experience in L3 SOC operations.
• Demonstrated expertise in advanced incident response.
• Experience with threat hunting methodologies.
• Proficiency in SIEM detection engineering.
• A minimum of 5 to 10 years of relevant experience is required.

Work Location

This position is based in Riyadh, Riyadh, Saudi Arabia.

Application Information

Candidates with the required experience in L3 SOC operations, advanced incident response, threat hunting, and SIEM detection engineering are encouraged to apply. Salary details will be disclosed during the recruitment process.