Jobs / IT, Software, Analytics / Job #1839

SOC Analyst L3

Recruiting Hub Recruiter
Saudi Arabia, Middle East Permanent SAR15000 - SAR20000 / month

Job Description

Posted October 8, 2026
We are recruiting "SOC Analyst L3" for our client in Saudi Arabia.

1. Act as the technical escalation point for complex or high-severity incidents.
2. Lead end-to-end incident response: investigation, containment, eradication, recovery.
3. Conduct advanced threat hunting across endpoints, network, cloud, email, and logs.
4. Perform malware analysis, memory forensics, and deep log analysis.
5. Manage Purple Team exercises and drive SOC maturity improvements.
6. Handle threat intelligence enrichment, IOC correlation, and intel reporting.
7. Coordinate with IT, GRC, and senior management during major incidents.
8. Provide advanced training and mentorship for L1 and L2 analysts.
9. Lead RCA (Root Cause Analysis) and Post-Incident Review (PIR) processes.
10. Evaluate and recommend new SOC technologies, tools, and integrations
11. Design, build, and maintain SIEM detection use-cases aligned with MITRE ATT & CK.
12. Enhance and tune existing detection rules to improve accuracy and reduce false positives.
13. Assess detection gaps and ensure proper visibility across all critical log sources.
14. Validate onboarding of new log sources and ensure logs are normalised and parsed correctly.
15. Work with threat intelligence to integrate new IOCs, behavioural patterns, and detection logic.
16. Create detection roadmaps and continuously improve SIEM coverage.
17. Develop correlation rules, dashboards, and automated workflows.
18. Collaborate with infrastructure teams to ensure required logs (EDR, firewall, cloud, proxy, email, apps) are feeding into the SIEM.
19. Conduct periodic tuning sessions to improve alert fidelity and SOC efficiency.
Apply Now