The Role
Monitors SIEM and security tools, analyzes alerts and logs, validates potential threats, escalates incidents, prepares security reports, supports customer inquiries, and assists with SOC tools, dashboards, and processes under supervision.
Summary Generated by Built In
Job Brief
Responsible for monitoring the different security systems utilized in a SOC environment to ensure the timely detection of security incidents. This position involves performing daily operational security-related tasks (monitoring, investigating, escalating, and responding)
Key Responsibilities
- Actively monitor security alerts from the SIEM and other security tools to identify potential threats.
- Perform initial analysis to assess the severity and validity of alerts.
- Escalate incidents requiring advanced analysis or response to L2 analysts or relevant teams.
- Review and analyze logs from various sources, such as firewalls, servers, and endpoints, to detect suspicious activity.
- Prepare and maintain periodic reports on security incidents and events for internal teams and stakeholders.
- Respond to customer requests for information or support regarding security incidents or events.
- Assist in maintaining SOC tools, dashboards, and processes under supervision.
- Stay informed about the latest cybersecurity threats and attack vectors.
Qualifications, Skills and Experience
Education: Bachelor Degree in Cyber Security, Computer Science, Computer Engineering or any related field
Level of Experience: Basic Knowledge (0-2Yrs) in IT security, cybersecurity, or SOC operations.
Certifications & Licensure:
Essential:
One or more of the following technical certificates (or equivalent):
• EC-Council Certified SOC Analyst (CSA)
• EC-Council Certified Ethical Hacker (CEH)
• CompTIA Security+
Desirable:
One or more of the following technical certificates (or equivalent):
• Splunk Core Certified Power User
• Cisco Certified Network Associate Routing & Switching (CCNA)
• eCIR (Certified Incident Responder)
Tools & Systems:
Essential:
• Basic knowledge of the following security systems:
o Security information and event management (SIEM)
o Intrusion detection and prevention (IDPS)
• Good knowledge of various operating system including Windows, Linux and UNIX
Desirable:
• Basic knowledge of the following security systems:
o Next-generation firewall (NGFW)
o Endpoint Antivirus/Antimalware
o Endpoint detection and response (EDR)
o Denial of service (DoS) attacks mitigation
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related field
- Basic knowledge of IT security, cybersecurity, or SOC operations, with 0–2 years of experience
- One or more of EC-Council Certified SOC Analyst, Certified Ethical Hacker, CompTIA Security+, or equivalent certifications
- Basic knowledge of SIEM and intrusion detection and prevention systems
- Good knowledge of Windows, Linux, and UNIX operating systems
- Splunk Core Certified Power User, CCNA, eCIR, or equivalent certification
- Basic knowledge of next-generation firewalls, endpoint antivirus/antimalware, EDR, and DoS attack mitigation
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Hulool Group is a Saudi organization focused on digital transformation for the Hajj and Umrah sector. It combines management and technology consulting with digital solutions, infrastructure and cybersecurity services, and knowledge enrichment. The group develops and operates systems and platforms for pilgrimage-season management, housing, catering, transportation, visitor experience, seasonal workforce management, and related artificial-intelligence and sustainability products serving pilgrims and participating organizations.
