SOC Analyst Level (L )

About the Role

Hays is seeking a SOC Analyst Level (L ) to join their team in Riyadh, Saudi Arabia. This is a contract position for an experienced professional responsible for advanced threat detection, complex incident analysis, and guiding SOC maturity. The role involves leading high-severity incident investigations and developing custom security solutions.

Role Summary

The SOC Analyst serves as a senior escalation point within the Security Operations Center. This position is critical for identifying and responding to advanced threats, performing in-depth analysis of security incidents, and contributing to the continuous improvement of the SOC's capabilities through use-case development and custom parsing.

Key Responsibilities

• Lead investigations for high-severity incidents, conduct threat hunting, and perform root-cause analysis.
• Perform deep log analysis across various sources including endpoint, network, cloud, identity, and application.
• Develop custom log parsers for non-standard log sources to ensure accurate telemetry ingestion.
• Build and fine-tune use cases, correlation rules, and behavioral detections aligned with the MITRE ATT&CK framework.
• Conduct proactive threat hunting and detection tuning to reduce false positives.
• Provide guidance to L1/L2 teams and support improvements to security playbooks.
• Prepare technical and executive-level incident reports and offer remediation guidance.

Qualifications and Experience

• Candidates should possess 5-8+ years of experience in SOC, DFIR (Digital Forensics and Incident Response), or detection engineering roles.
• A strong background in advanced threat detection and incident analysis is required.

Work Type and Location

This is a contract position based in Riyadh, Saudi Arabia. The role requires on-site presence to effectively manage and respond to security incidents.

Application Process

Interested candidates with the required experience are encouraged to apply. Salary details will be discussed during the interview process.