SOC Analyst; L2 - KSA Onsite

K20s - Kinetic Technologies Private Limited provided pay range

This range is provided by K20s - Kinetic Technologies Private Limited. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Job Role: SOC Analyst (L2) - KSA

Location:
Kingdom of Saudi Arabia (KSA) Onsite

Experience: 3+ years

Employment Type:
Semi-Government Sector

Operations: 24/7 Onsite Security Operations Center (SOC)

Contract: 1-Year Extendable Contract

Joining:
Immediate Joiners Preferred

Join our dynamic L2 SOC team to provide continuous, high-quality security monitoring and incident response services for a critical semi-government entity. This role requires flexibility for 24/7 operations in a high-stakes, onsite environment.

• L1 Monitoring & Triage:
• Perform 24/7 continuous monitoring of security tools (SIEM, EDR, Firewalls, etc.).
• Conduct initial analysis and triage of security alerts and events.
• Validate potential security incidents and perform basic enrichment.
• Escalate validated incidents to the L2 team promptly and accurately.
• Generate and maintain daily security reports and shift handover logs.
• L2 Incident Response & Investigation:
• Execute detailed incident investigation for escalated events.
• Perform root cause analysis and develop mitigation strategies.
• Apply standard playbooks and procedures for handling common incident types (malware, phishing, unauthorized access).
• Coordinate with other IT teams for effective incident resolution and containment.
• Assist in tuning security monitoring tools to reduce false positives.
• General:
• Maintain high proficiency in the SOC environment tools and processes.
• Document all activities, analysis, and response actions in the ticketing system.
• Participate in shift rotations for 24/7 operations.

• Proven experience in a Security Operations Center (SOC) environment is mandatory.
• Strong hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, etc.).
• Deep understanding of networking concepts, protocols, and security principles.
• Knowledge of common attack vectors and threat intelligence concepts.
• Excellent communication and teamwork skills.
• Relevant industry certifications (e.g., Security+, CEH, CYSA+) are a plus.

Skills:

security operations,splunk,cysa+,firewall,sentinel,networking concepts,security operations center,24/7 operations,incident response,certifications,government,incident investigation,siem,operations,protocols,security+,ceh,soc

Mid-Senior level

Contract

Information Technology

IT Services and IT Consulting