logistics manager

account manager

administrative customer virtual entry-level admin assistant (copy) Jobs in Jeddah

administrative research assistant (remote) Jobs in Jeddah

area sales manager

assistant manager ot network security

DP World

<div>
 
 JOB PURPOSE
 
 
 To manage and secure operational technology (OT) network infrastructure, ensuring compliance, resilience, and cybersecurity across port operations.
 
 
 
 
 
 KEY ACCOUNTABILITIES
 
 <ul>
 <li>
 Maintain OT network and security architecture.
 </li>
 <li>
 Ensure compliance with NCA &amp; DP World cybersecurity frameworks.
 </li>
 <li>
 Monitor OT network for threats and vulnerabilities.
 </li>
 <li>
 Coordinate incident response and forensic analysis for OT systems.
 </li>
 <li>
 Collaborate with IT security for converged defense strategy.
 </li>
 </ul>
 
 
 
 
 QUALIFICATIONS, EXPERIENCE AND SKILLS
 
 <ul>
 <li>
 Bachelor&rsquo;s in IT, Cybersecurity, or related field.
 </li>
 <li>
 8+ years in OT/ICS/SCADA network &amp; security.
 </li>
 <li>
 Certifications: GICSP, CISSP, CCNP Security, NCA compliance training.
 </li>
 <li>
 Strong knowledge of firewalls, IDS/IPS, and OT security standards (ISA/IEC 62443).
 </li>
 </ul>
 
 
</div>

Assistant Manager – OT Network & Security

DeepSource Technologies

<div>Position Overview
We are seeking a highly skilled Senior SOC Analyst &ndash; Layer 2 (L2) to join our Cybersecurity Operations Center (SOC) in Jeddah. The selected candidate will play a critical role in advanced threat detection, in-depth incident investigation, containment, and response activities across enterprise environments.
This position requires strong hands-on operational experience in SOC environments, with proven capability in analyzing complex security events, leading incident response activities, tuning detection use cases, and mentoring junior analysts (L1).
________________________________________
Key Responsibilities
1. Advanced Threat Monitoring &amp; Analysis<ul><li>Perform in-depth analysis of security alerts escalated from L1 analysts.</li><li>Investigate complex incidents using SIEM, EDR, NDR, and other security tools.</li><li>Validate and classify security events to eliminate false positives.</li><li>Conduct log correlation and behavioral analysis across multiple data sources.</li><li>Identify Indicators of Compromise (IOCs) and map them to the MITRE ATT&amp;CK framework.</li></ul>
2. Incident Response &amp; Containment<ul><li>Lead incident triage, containment, eradication, and recovery efforts.</li><li>Coordinate with IT, network, cloud, and system teams during active incidents.</li><li>Perform root cause analysis and recommend corrective security controls.</li><li>Develop and update Incident Response playbooks and runbooks.</li><li>Support digital evidence preservation and forensic readiness.</li></ul>
3. SIEM &amp; Detection Engineering Support<ul><li>Create and tune correlation rules and detection use cases in Splunk Enterprise Security, IBM QRadar, or equivalent SIEM platforms.</li><li>Enhance alert logic to reduce false positives and improve detection accuracy.</li><li>Develop advanced queries (e.g., SPL, AQL, KQL) for threat hunting.</li><li>Ensure log sources are properly normalized and mapped to data models.</li></ul>
4. Threat Hunting &amp; Proactive Defense<ul><li>Conduct proactive threat hunting using EDR, SIEM, and threat intelligence feeds.</li><li>Investigate suspicious anomalies and lateral movement indicators.</li><li>Integrate threat intelligence into detection logic.</li><li>Participate in purple team exercises and attack simulations.</li></ul>
5. Endpoint &amp; Network Security Operations<ul><li>Perform deep investigations using EDR solutions such as Microsoft Defender for Endpoint, CrowdStrike Falcon, or equivalent.</li><li>Analyze firewall, proxy, VPN, IDS/IPS logs (e.g., Palo Alto, Fortinet, Cisco).</li><li>Monitor and investigate suspicious email threats (phishing, malware, BEC).</li></ul>
6. Escalation &amp; Reporting<ul><li>Prepare detailed incident reports with technical findings and executive summaries.</li><li>Escalate high-severity incidents to SOC Manager and CISO when required.</li><li>Provide weekly and monthly security incident metrics.</li><li>Support compliance and audit reporting requirements (SAMA CSF, NCA ECC, ISO 27001, PCI DSS).
</li></ul>On-Call Support<ul><li>Participate in 24x7 on-call rotation for critical incident handling.</li><li>Respond to high-severity incidents outside business hours when required.</li></ul> 
Requirements 
Candidates must demonstrate proven hands-on experience in:<ul><li>Minimum 5&ndash;7 years of experience in SOC operations.</li><li>At least 3 years in an L2 role or equivalent advanced SOC position.</li><li>Hands-on experience with enterprise SIEM platforms (Splunk, QRadar, ArcSight, Sentinel).</li><li>Advanced log analysis and event correlation.</li><li>Incident response lifecycle management.</li><li>EDR investigation and containment.</li><li>Malware analysis fundamentals (hash analysis, sandboxing, behavior analysis).</li><li>Network traffic analysis (PCAP, NetFlow, TCP/IP fundamentals).</li><li>Strong understanding of Windows/Linux security events.</li><li>Experience working in regulated environments (Banking, Government, Critical Infrastructure preferred).</li><li>Familiarity with cloud security monitoring (Azure/AWS logs preferred).</li></ul>
Preferred Technical Knowledge<ul><li>MITRE ATT&amp;CK framework mapping.</li></ul></div>

Senior SOC Analyst L2 - Saudi National - Jeddah, KSA

Accenture

<ul><li>Operate and support Network Security services on a day‑to‑day basis, including:<ul><li>
Network Detection and Response (Darktrace)</li><li>
DDoS protection (Arbor)</li><li>
Firewall policy analysis and change validation (AlgoSec)</li><li>
Malware analysis and threat detection (FortiSandbox)</li><li>
Web Application Firewall operations (F5 WAF)</li></ul></li><li>
Monitor, analyze alerts, and investigate network and application‑layer security events.</li><li>
Support incident detection, containment, escalation, and resolution activities.</li><li>
Administer and operate network security devices and platforms, ensuring secure configuration, availability, and performance across on‑premises and cloud environments.</li><li>
Perform patching, upgrades, and signature updates in line with approved processes.</li><li>
Identify operational gaps and contribute to continuous improvement initiatives.</li><li>
Support troubleshooting of network and security issues, including traffic analysis and packet capture when required.</li><li>
Maintain operational documentation and support audits and reporting activities.</li><li>
Escalate complex technical issues to senior teams or vendors as needed.</li></ul>
 
<ul><li>1&ndash;3 years of experience in Network Security or Information Security roles.</li><li>
Hands‑on experience operating:<ul><li>
Network Detection and Response (NDR)</li><li>
DDoS protection solutions</li><li>
Firewall environments</li><li>
Sandbox / malware analysis solutions</li><li>
Web Application Firewalls (WAF)</li></ul></li><li>
Strong understanding of network security concepts, including:<ul><li>
Traffic analysis</li><li>
Threat detection</li><li>
Incident response processes</li></ul></li><li>
Relevant security certifications are considered an advantage.</li></ul>

Infrastructure Security Analyst - Saudi Nationals

<div>Responsibilities:<div><ul><li>
Lead and operate enterprise Network Security services, including NDR, DDoS protection, firewalls, sandboxing, and WAF across on‑prem and cloud environments.</li><li>
Provide technical and operational leadership to teams managing firewalls, web application security, sandboxing, and threat detection.</li><li>
Oversee response and escalation for network and application‑layer security incidents, including DDoS attacks and advanced threats.</li><li>
Drive continuous improvement by identifying security gaps, optimization opportunities, and underutilized capabilities.</li><li>
Ensure network security platforms are patched, upgraded, and operated in line with vendor and organizational standards.</li><li>
Support security architecture decisions, audits, compliance activities, and service reporting, acting as an escalation point for stakeholders.</li></ul></div></div>
 
<ul><li>7&ndash;9 years of experience in Information Security with strong operational exposure to network security domains.</li><li>
Proven experience leading network security operations teams in complex enterprise environments.</li><li>
Strong understanding of NDR, DDoS protection, firewall governance, sandboxing, and web application security across on‑prem and cloud platforms.</li><li>
Hands‑on experience implementing, operating, and designing network security solutions independently.</li><li>
Experience with technologies such as FortiGate, Palo Alto, F5, Arbor, Darktrace, FireEye, Zscaler, Forcepoint, Symantec, Proofpoint, and Trend Micro.</li><li>
Strong leadership, problem‑solving, and communication skills.</li><li>
Relevant security certifications are an advantage.</li></ul>

Infrastructure Associate Manager

sirar by stc

<div>
 
 
 Company Overview:
 
 
 
 
 
 
 Advanced technology and cybersecurity company (sirar) established by stc, the region&rsquo;s ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organization to take control of their cyber capabilities and digital environments as experts in business security and privacy.
 
 
 
 
 
 We offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.
 
 
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Uses cybersecurity defense tools and technologies to monitor, analyze and responds system activity continuously to identify real time customer cybersecurity events/incidents and determine possible causes as 1st response level.
 </li>
 <li>
 Identifies, categorizes, prioritizes, investigates, and reports incoming alerts of cybersecurity events/incidents to MSOC customers as per defined MSOC processes, playbook &amp; guidelines through official channels (sirar Ticketing System &amp; MSOC Email).
 </li>
 <li>
 Prepares and generates the required MSOC Daily, Weekly &amp; Monthly reports to stakeholders.
 </li>
 <li>
 Performs indicator of compromise (IoCs), threats and type of Attacks and Notify MSOC customers for sweep results
 </li>
 <li>
 Handles the customer&rsquo;s tickets &amp; emails on required alerts during the shift within SLA.
 </li>
 <li>
 Resolves False Positive events into security solutions.
 </li>
 <li>
 Checks customer general logs, devices log specially for critical devices and reports for stakeholders.
 </li>
 <li>
 Opens/reassigns ticket to MSS development team to implement the recommended actions that approved by MSOC customer which under MSS development team case study.
 </li>
 <li>
 Reports unclear/noisy events and major incidents to 2nd level to evaluate &amp; take action.
 </li>
 <li>
 Contributes to the overall success of the company by performing all other duties and responsibilities as assigned by line manager.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Academic Qualification:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or related discipline
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Professional Certificate:
 
 
 <ul>
 <li>
 Certificate in CCNA Security/CompTIA/Security+.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Years of Experience:
 
 
 <ul>
 <li>
 0-1 Year in relevant experience.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Skills:
 
 
 <ul>
 <li>
 Basic proficiency in recognizing vulnerabilities in security systems.
 </li>
 <li>
 Basic proficiency in using intrusion detection technologies to detect host and network-based intrusions.
 </li>
 <li>
 Basic proficiency in effectively recognizing and categorizing types of vulnerabilities and associated attacks.
 </li>
 <li>
 Basic proficiency in assessing security controls based on cybersecurity principles and tenets.
 </li>
 <li>
 Basic proficiency in effectively performing root cause analysis for cybersecurity issues.
 </li>
 </ul>
 
 
</div>

SOC L1 Analyst/Specialist - Jeddah

SAIC

<div>Job ID: T2508944
Location: Jeddah, 02, SA
Date Posted: 2026-03-05
Category: Engineering and Sciences
Subcategory: Sys Integration
Schedule: Full-Time
Shift: Day Job
Travel: Yes - 10% of the time
Minimum Clearance Required: None
Clearance Level Must Be Able to Obtain: Secret
Potential for Remote Work: ORA_ON_SITE 
Description
﻿
SAIC is seeking a Subject Matter Expert in Link 16 in Riyadh, Saudi Arabia.
This position supports the Royal Saudi Naval Forces (RSNF) and is contingent upon award news in Dec 2025.

Job Duties:
<ul>
<li>Provide technical expertise and support in the design, implementation, and maintenance of Link 16 systems, with a strong emphasis on MIDS/JTRS, LVT 1, and LVT 2 hardware.</li>
<li>Thorough understanding of Link 16 network creation, including all components necessary to create a Link 16 network.</li>
<li>Understanding of how to create, read, and interpret OPTASK LINKs, Network Design Documents, and Initialization Data Load Files.</li>
<li>Conducts thorough analysis and troubleshooting to identify and resolve issues related to Link 16 systems, including hardware, software, and network configurations.</li>
<li>Develops and implement effective strategies for system optimization, performance improvement, and risk mitigation.</li>
<li>Performs system testing and evaluation to ensure compliance with established standards, protocols, and security requirements.</li>
<li>Prepare comprehensive technical documentation, including system specifications, test plans, and operational procedures.</li>
<li>Collaborates with JITC for certification and compliance processes, ensuring adherence to standards and guidelines.</li>
</ul>
Qualifications
﻿
Required: 
<ul><li>
Three+ (3) years experience supporting C4I Tactical Data Link systems such as Link-11, Link-16, and Link-22.</li><li>
Experience working OCONUS in security cooperation efforts or for foreign customers (i.e., not for US military bases or USG facilities). 
</li><li>
Bachelor's degree in a Technical field such as Engineering, Science or a related field of study from an accredited college or university. 
</li><li>
US Citizenship. 
</li><li>
US SECRET security clearance, or verification of the ability to get one.</li></ul>
Desired: 
<ul><li>
Three+ (3) years experience with NAVWAR prime mission products. 
</li><li>
Experience interacting with USG and foreign senior military/government officials. 
</li><li>
Completion of DISAM SCM courses such as SCM-C. 
</li><li>
DISAM International Affairs Certification Level 1 or above. Experience working in austere locations (e.g., Middle Eastern nations) in security cooperation/assistance efforts or for foreign customers (i.e., not for US military bases or USG facilities.).</li></ul></div>

Tactical Data Link Engineer

<div>Position Overview
We are seeking a highly experienced Senior SOC Analyst &ndash; Layer 3 (DFIR) to lead advanced digital forensic investigations and incident response operations within our Cybersecurity Operations Center (SOC) in Jeddah.
The selected candidate will act as the highest technical escalation point for major security incidents, conduct in-depth forensic investigations, manage complex breach scenarios, and provide strategic guidance to SOC L1 and L2 teams. This role requires strong hands-on DFIR expertise in enterprise environments, including endpoint, network, cloud, and hybrid infrastructures.
Key Responsibilities
1. Advanced Incident Response Leadership<ul><li>Lead end-to-end handling of high-severity cybersecurity incidents (Ransomware, APT, data exfiltration, insider threats).</li><li>Direct containment, eradication, and recovery strategies during critical incidents.</li><li>Serve as primary escalation point for SOC L2 investigations.</li><li>Coordinate with IT, Legal, Risk, Compliance, and executive leadership during crisis situations.</li><li>Conduct post-incident reviews and lessons-learned workshops.</li></ul>
2. Digital Forensics Investigations<ul><li>Perform forensic acquisition and analysis of endpoints, servers, and cloud workloads.</li><li>Conduct disk, memory, and network forensics using industry-standard tools.</li><li>Preserve and maintain chain-of-custody documentation.</li><li>Analyze artifacts such as registry, event logs, browser history, persistence mechanisms, and lateral movement traces.</li><li>Prepare forensic reports suitable for executive and legal review.</li></ul>
3. Endpoint &amp; EDR Deep Analysis<ul><li>Perform deep investigations using enterprise EDR platforms such as</li></ul>
Microsoft Defender for Endpoint,
CrowdStrike Falcon, or equivalent.<ul><li>Conduct advanced threat hunting and behavioral analysis.</li><li>Reverse-engineer suspicious scripts or malware (basic to intermediate level).</li></ul>
4. SIEM &amp; Log Correlation Expertise<ul><li>Conduct advanced log analysis across SIEM platforms such as</li></ul>
Splunk Enterprise Security,
Microsoft Sentinel, or equivalent.<ul><li>Develop and optimize advanced detection queries (SPL / KQL).</li><li>Correlate endpoint, network, identity, and cloud telemetry for full attack chain reconstruction.</li><li>Map incidents to MITRE ATT&amp;CK framework techniques.</li></ul>
5. Network &amp; Cloud Forensics<ul><li>Analyze PCAP, NetFlow, DNS, proxy, and firewall logs.</li><li>Investigate suspicious lateral movement and command-and-control traffic.</li><li>Perform forensic investigations within Microsoft 365, Azure, and AWS environments.</li><li>Assess identity compromise scenarios (AD, Azure AD, privileged access abuse).</li></ul>
6. Threat Intelligence &amp; Proactive Defense<ul><li>Integrate threat intelligence feeds into DFIR investigations.</li><li>Conduct proactive threat hunting campaigns.</li><li>Participate in red team / purple team exercises.</li><li>Identify detection gaps and recommend defensive improvements.</li></ul>
7. Governance &amp; Compliance Support<ul><li>Ensure forensic readiness aligned with NCA ECC, SAMA CSF, ISO 27001, and other regulatory frameworks.</li><li>Maintain forensic documentation aligned with legal admissibility standards.</li><li>Contribute to incident response policy and playbook development.</li></ul>
8. On-Call &amp; Crisis Response<ul><li>Participate in 24x7 on-call rotation for major incidents.</li><li>Provide immediate response and executive-level briefing during critical cybersecurity events.</li></ul> 
Requirements 
Candidates must demonstrate proven, hands-on DFIR experience in:<ul><li>Minimum 7&ndash;10 years of experience in cybersecurity operations.</li><li>At least 3&ndash;5 years in L3 / DFIR role handling major enterprise incidents.</li><li>Practical experience with forensic tools such as:</li></ul>
o EnCase
o FTK
o X-Ways
o Volatility
o Autopsy<ul><li>Memory forensics and live response techniques.</li><li>Ransomware investigation and recovery coordination.</li><li>Advanced Windows &amp; Linux artifact analysis.</li><li>Network protocol deep understanding (TCP/IP, DNS, HTTP/S, SMB, LDAP, Kerberos).</li><li>Cloud security investigations (Azure / AWS / M365).</li><li>Evidence handling and chain-of-custody documentation.</li><li>Experience working in regulated sectors (Banking, Government, Critical Infrastructure preferred).</li></ul></div>

Senior SOC Analyst L3 - Saudi National - Jeddah, KSA

Explore 195+ Assistant manager ot network security in Jeddah this March. Find roles across top companies and apply now to boost your career.