business analyst

business analyst - banking domain Jobs in Riyadh

business analyst - banking domain

gis specialist

internal audit manager

it support engineer

security analyst

Vectra AI

<div>
 Vectra&reg; is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.
 
 
 The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai.
 
 
 
 Position Overview
 
 
 
 Serving in the role of
 
 Senior Security
 
 
 Analyst
 
 , you will join Vectra's MXDR team and use your knowledge of attack and penetration techniques to analyze and interpret real and persistent threats against our customers, piece together indicators of an attack to enumerate the kill-chain, and explain the observed threats in a meaningful and actionable way to both prospects and customers. This is a customer-facing role.
 
 
 You will be responsible for post sales customer engagement, planning, optimization, and follow-on services and support of the Vectra Platform along with EDR and 3rd party integrations at customer sites. The successful candidate will have sound technical experience and skills, blended with strong interpersonal, communication, and project management skills.
 
 
 You will resolve complex cyber security challenges and help customers learn how to distinguish benign from malicious network behavior. Leveraging cloud data and advanced machine learning models, you will apply your experience in defending vulnerabilities in real-world networks to anticipate customer challenges and help progress the core technologies of the company &ndash; with a focus on empowering customers to get ahead of the threat.
 
 
 This is a highly technical role and deep knowledge of Linux and networking is required, as well as a strong background in security. Resolving customer issues routinely includes working in complex product and infrastructure configurations, problem troubleshooting and isolation, performance tuning and optimization.
 
 
 When not working with customers and analyzing the threats present within their networks, as an Analyst you are expected to research new security topics, engage in bug-hunts, and contribute to the community in a way that helps grow both your personal and company brands. As the voice of the customer, you will be an integral part of our success.
 
 
 
 Your role at a glance
 
 
 
 <ul>
 <li>
 Engage with enterprise customers as a Vectra product expert to support implementation of the Vectra solution at their sites.
 </li>
 <li>
 Assist customers with the integration of Vectra into existing ecosystem and tools
 </li>
 <li>
 Conduct health checks and architecture reviews, providing technical expertise and real-life experience in creating solutions, designs, and recommendations
 </li>
 <li>
 Identify blind spots in customer network security architecture and provide expert guidance on remediation
 </li>
 <li>
 Be a strong voice for your customers across business to identify new detection models, identify new product features, build content for both internal and external customer knowledge bases, and ensure that successful Vectra deployments.
 </li>
 <li>
 Drive high levels of customer satisfaction
 </li>
 <li>
 Provide training and guidance to customers in proper usage of the Vector platform.
 </li>
 <li>
 Analyze threats, piece-together exploitation trails, and study lateral movements of attackers within customer networks
 </li>
 <li>
 Expertly explain to customers your conclusions and recommendations for mitigating or remediating an in-progress attack
 </li>
 <li>
 Provide an attackers-eye-view to the evidence presented by the clients' products and educate customers to the technical nature of the threat
 </li>
 <li>
 Pursue security research topics that contribute to the knowledge and enumeration of new threats
 </li>
 <li>
 Travel expected 20-30%
 
 
 </li>
 </ul>
 
 To be successful in your new role, you have
 
 
 
 <ul>
 <li>
 Solid experience working in a technical customer-facing role or in an end user/customer environment
 </li>
 <li>
 Relevant professional security consulting experience
 </li>
 <li>
 Demonstrated experience in working with broad cross-functional teams
 </li>
 <li>
 Exceptional ability of presenting and explaining technology to people with less technical knowledge
 </li>
 <li>
 Excellent organizational, analytical, and writing skills
 </li>
 <li>
 Ability to work independently and adapt quickly
 
 
 </li>
 </ul>
 
 The technical essentials
 
 
 
 <ul>
 <li>
 Good understanding of security product lines (firewalls, sandboxing, SIEM, forensics-type platforms)
 </li>
 <li>
 Understanding of network architectures including SPAN/mirroring configuration &amp; network monitoring technologies (switching technologies)
 </li>
 <li>
 Understanding of network protocols such as TCP/IP, DHCP, DNS, NAT, VPN, PKI, RADIUS, etc.
 </li>
 <li>
 Good understanding of SQL and non-SQL databases
 </li>
 <li>
 Proficiency with packet capture tools, PCAPs, and their analysis
 </li>
 <li>
 Experience with EDR tools including Crowdstrike, Microsoft Defender for Endpoint (MDE) &amp; SentinelOne
 
 
 </li>
 </ul>
 
 Experience that impresses us as a plus
 
 
 
 <ul>
 <li>
 Experience with Active Directory, LDAP, VPN, firewalls, policy management, and LAN/WAN/Internet services administration
 </li>
 <li>
 Understanding of Cloud architecture for AWS and/or Azure; experience deploying in Cloud (AWS/Azure) architecture environments
 </li>
 <li>
 Scripting skills (preferably Python or Powershell) highly desired. Open source development a plus.
 </li>
 <li>
 Experience working with LLMs, prompt design &amp; iteration
 
 
 </li>
 </ul>
 Vectra provides a comprehensive total rewards package that supports the financial, physical, mental and overall health of our employees and their families. Compensation includes competitive base pay, incentive plan eligibility, and participation in the employee equity plan (stock options). Specific benefits offered varies by location, but commonly include health care insurance, income protection / life insurance, access to retirement savings plans, behavioral &amp; emotional wellness services, generous time away from work, and a comprehensive employee recognition program.
 
 
 Vectra is committed to creating a diverse environment and is proud to be an equal opportunity employer.
 
 
 We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.
</div>

Sr Security Analyst

Specialized Technical Services – STS

<div>Our Culture:
At Hulool Zaintech for Information Technology we are proud of our culture and how it drives everything we do. We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves around collaboration and innovation. If you are looking for a role where you can drive engagement and excellence across teams through commitment and collaboration, and are someone who is customer-centric and appreciates an organization with uncompromised integrity that focuses on employee engagement then read on to learn more about how you can become part of the Hulool Zaintech family.
Our Code of Conduct
At Hulool Zaintech for Information Technology we strictly adhere to our code of conduct, which is there to serve as a moral compass, offering a framework for responsible behaviours and enabling ethical choices that cultivate positive relationships and a better future. It also outlines policies, standards, and procedures for our global operations, promoting integrity and ethical excellence across the countries we engage with.
Every year, all employees are required to review, comprehend, confirm, and adhere to the code of conduct. Additionally, all newly hired employees are subject to the same as part of their onboarding process.
The SOC L1 team plays a critical role in maintaining the security posture of an organization and protecting it from cyber threats. 
Duties and Responsibilities:<ul>
<li>Performing initial analysis on true positive alerts to determine root cause and impact.</li>
<li>Undertake first stages of false positive and false negative analysis.</li>
<li>Generate weekly reports from SIEM platform and send it to L2 SOC analysts for review</li>
<li>Track and update incidents and requests based on client&rsquo;s updates and analysis results</li>
<li>Escalate validated and confirmed incidents as per escalation procedures.</li>
<li>Collection of necessary logs that could help in the incident containment and security investigation</li>
<li>Acknowledge, analyze and validate incidents received through other reporting mechanisms such as email, phone calls, management directions, etc.</li>
<li>Acknowledge, analyze and validate incidents triggered from correlated events through SIEM solution.</li>
<li>Other duties related to the position</li>
</ul>Requirements<ul>
<li>Bachelor's degree in Cyber Security, Computer Science, or any IT-related field</li>
<li>0-2 years of experience, fresh graduates are welcome to apply</li>
</ul>Minimum two of the below Certificates:<ul>
<li>Security+</li>
<li>CEH
</li><li>eLearnSecurity Certified Incident Responder
</li><li>EC-Council Certified Security Analyst</li></ul></div>

Security Analyst (Saudi National only)

Mindstream

Job Advertisement &ndash; L1 SOC Analyst (Level 1) Location: Qatar Duration: 3 Years Salary: Based on merit Role Summary: The L1 SOC Analyst is the first line of defense in the Security Operations Center (SOC). This role is responsible for real-time monitoring, detection, and escalation of security incidents, ensuring timely responses to potential threats. Key Responsibilities: Monitor SIEM and other security monitoring tools for alerts and suspicious activity. Perform initial triage to assess severity and potential impact of incidents. Escalate high-priority incidents to L2 Analysts or SOC Manager. Document incidents, findings, and actions taken in tracking systems. Support in basic investigations of malware, phishing, and intrusion attempts. Follow SOC playbooks and standard operating procedures. Requirements: Basic knowledge of cybersecurity concepts, threats, and attack vectors. Familiarity with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel). Understanding of TCP/IP, networking fundamentals, and operating systems. Strong analytical and communication skills. Willingness to work in 24x7 shift rotations. Experience in SOC setup, administration, and management is an advantage. Hands-on with Windows (Event Viewer, PowerShell) &amp; Linux CLI (logs, services). Ability to analyze logs from firewalls, proxies, and endpoints. Effective communication and documentation skills. Certifications (at least two required): CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk certification, or equivalent.Job Type: Full-timeApplication Question(s):<ul><li>Do you have prior experience working in a Security Operations Center (SOC)?</li><li>How many years of professional experience do you have in cybersecurity or SOC monitoring roles?</li><li>Do you hold at least two relevant cybersecurity certifications (e.g., CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk, etc.)? please mention.</li><li>Are you comfortable working in 24x7 shift rotations, including nights, weekends, and holidays?</li><li>How would you rate your knowledge of networking fundamentals (TCP/IP, DNS, HTTP, ports, subnets, firewall logic)?</li><li>What is your current and expected monthly salary (QAR)? Notice period?</li></ul>

L1 SOC Analyst (Level-1)

Job Advertisement &ndash; L2 SOC Analyst (Level 2) Location: Qatar Duration: 3 Years Role Summary: The L2 SOC Analyst serves as the second line of defense, conducting in-depth investigation, analysis, and response to escalated security incidents. This role ensures proper containment, remediation, and detailed reporting of threats. Key Responsibilities: Investigate escalated incidents from L1 Analysts. Perform root cause analysis and recommend corrective actions. Conduct malware analysis, threat hunting, and log correlation. Fine-tune SIEM rules and detection use cases to minimize false positives. Coordinate with IT/security teams for incident containment and remediation. Mentor and support L1 Analysts with technical expertise. Prepare detailed incident reports and contribute to incident response planning. Requirements: 2&ndash;4 years of SOC or cybersecurity operations experience. Strong knowledge of cybersecurity concepts, attack techniques, and mitigation strategies. Hands-on experience with SIEM, IDS/IPS, firewalls, and EDR tools. Skilled in log analysis (network, system, application) and threat intelligence usage. Familiarity with MITRE ATT&amp;CK, NIST, and ISO 27001 frameworks. Proficiency in scripting (Python/PowerShell) for automation and hunting. Excellent analytical, communication, and report writing skills. Advanced Skills Preferred: Threat hunting and digital forensics (memory, disk, or packet analysis). Malware reverse engineering and detection engineering. Experience with SOAR platforms, Wireshark, and YARA/Sigma rules. Applying threat feeds (VirusTotal, AlienVault OTX, MISP). Certifications (at least four required): CEH, OSCP, CySA+, GCIH, ECIH, CASP+, CISSP, Splunk/Microsoft Sentinel, GCFA, GREM, GCTI, or equivalent.Job Type: Full-timeApplication Question(s):<ul><li>How many years of experience do you have working in a Security Operations Center (SOC) role?</li><li>Do you have hands-on experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar)?</li></ul><ul><li>Which cybersecurity tools and technologies have you worked with? (Please specify)</li></ul>&#9744; Endpoint Detection &amp; Response (EDR)&#9744; IDS/IPS&#9744; Firewalls&#9744; Vulnerability Management tools&#9744; SOAR platforms&#9744; Threat Intelligence feeds<ul><li>Are you proficient in log analysis (network, system, application) and correlating events for incident investigations?</li><li>Do you have experience in threat hunting, digital forensics, or malware analysis?</li><li>Do you hold at least four relevant security certifications (e.g., CEH, OSCP, CySA+, GCIH, ECIH, CASP+, CISSP, Splunk/Microsoft Sentinel, GCFA, GREM, GCTI, etc.)?</li><li>What is your current and expected monthly salary (QAR)? Notice Period?</li></ul>

L2 SOC Analyst (Level-2)

Innovative Solutions

<div><h3 class="jobSectionHeader">Company Description</h3>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with operations in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our mission is to &lsquo;Bring Trust to Cyberspace&rsquo; and ensure &lsquo;Your Business, Secured&rsquo;. We offer comprehensive Cybersecurity Solutions and Services that include Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.<h3 class="jobSectionHeader">
Role Description</h3>
The SOC Analyst - Level 2 position at Innovative Solutions is a critical role within our Security Operations Center (SOC). In this role, you will be responsible for monitoring and analyzing security incidents, providing advanced incident response, and collaborating with other teams to mitigate risks to our clients&rsquo; networks and systems. You will leverage your expertise to analyze threats, investigate escalated incidents, and ensure the ongoing protection of sensitive information.<h3 class="jobSectionHeader">
Responsibilities</h3><ul>
<li>Monitor security alerts and escalate incidents as necessary.</li>
<li>Root-cause analysis and mitigation.</li>
<li>Develop SIEM/SOAR use cases.</li>
<li>Mentor L1 analysts.</li>
<li>Advise on SOC process improvements.</li>
<li>Develop and recommend security policies and procedures based on analyses.</li>
<li>Participate in threat hunting activities and identify potential indicators of compromise (IOCs).</li>
</ul>Requirements<ul><li>
Bachelor's degree in Computer Science, Information Security, or a related field.</li></ul><ul>
<li>3 to 5 years of experience in a Security Operations Center or Incident Response (SOC/IR) environment.</li>
<li>Strong IDS/IPS, SIEM, EDR knowledge.</li>
<li>Relevant certifications, such as Security+, CEH, Splunk, GCIA, GCIH are preferred.</li></ul></div>

SOC Analyst- L2

MBC GROUP

<div>
 
 
 About us
 
 
 
 
 
 
 With three decades of creating iconic brands and producing groundbreaking award-winning content, MBC GROUP is the leading media organization in the MENA region and the number one Arabic media company in the world. MBC GROUP employs 3000+ staff from over 70 nationalities with a global audience of over 150 million viewers. It reaches audiences through multi-platform experiences &ndash; premium broadcasting, digital streaming, gaming, radio, apps, events, and more.
 
 
 
 
 
 We are seeking a dedicated and detail-oriented Security GRC (Governance, Risk, and Compliance) Analyst to join our dynamic team. In this crucial role, you will help establish a new Cyber GRC function, ensuring our organization not only meets regulatory requirements but also effectively manages risks and implements robust governance frameworks. Your deep understanding of risk management, compliance processes, and governance principles will be vital in shaping the future success of our technology services and customer products.
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 
 
 
 Security Risk Management:
 
 
 <ul>
 <li>
 Adhering to regional policy and industry standards facilitate the end-to-end security risk management process, ensuring that risks are proactively identified, assessed, recorded, and mitigated.
 </li>
 <li>
 Maintain a risk register and evaluate security risks based on their potential enterprise-wide &amp; product impact, likelihood, and mitigation strategies.
 </li>
 <li>
 Serve as a trusted security advisor, collaborating with cross-functional teams including IT, Internal Audit, Development/Engineering, and other business operations teams to foster a culture of risk awareness.
 </li>
 <li>
 Ensure that all security risks align with regulatory requirements such as ISO 27001, NIST, GDPR, and other international security frameworks.
 </li>
 <li>
 Provide oversight and work closely with risk owners to manage the development and implementation of treatment plans that address identified risks
 </li>
 </ul>
 
 
 
 
 
 GRC Tool Management:
 
 
 <ul>
 <li>
 Take ownership of, manage, and continuously enhance the GRC platform to deliver structured and scalable GRC reporting.
 </li>
 <li>
 Develop new features with a GRC product mindset, focusing on integrations and custom reporting in the management tool.
 </li>
 <li>
 Capable of planning and prioritizing tasks to develop a timely and coordinated delivery plan for projects.
 </li>
 <li>
 Setup and manage automated workflows that integrate compliance checks on security controls across cloud and on-premise environments
 </li>
 <li>
 Experienced in writing compliance as code with third-party tools
 </li>
 <li>
 Ability to utilize AI services for analyzing, organizing, automating, and managing compliance frameworks and complex regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Audit &amp; Compliance Requirements:
 
 
 <ul>
 <li>
 Carry out a continuous assessment to ensure compliance with the necessary certifications and standards for the organization.
 </li>
 <li>
 Collaborate closely with the Cyber teams to ensure compliance with audit requirements and successful delivery for ISO 27001.
 </li>
 <li>
 Assist in addressing internal and external audit findings from reporting through to remediation and closure.
 </li>
 </ul>
 
 
 
 
 
 Governance:
 
 
 <ul>
 <li>
 Assist in documenting, managing and maintaining a central repository of cyber &amp; data policies to guide and inform teams within the organization.
 </li>
 <li>
 Help prepare management meeting reports by tracking updates on risk triage activities, changes to the critical risk register, and general strategies for risk mitigation.
 </li>
 <li>
 Assist in preparing management meeting reports by providing comprehensive tracking and updates on certification compliance milestones.
 </li>
 </ul>
 
 
 
 
 
 Security Team &amp; Data Governance Collaboration:
 
 
 <ul>
 <li>
 Establish a close collaborative working relationship with the Cyber Defense team.
 </li>
 <li>
 Utilize the cyber defense team's technical expertise to reduce risk and enhance compliance with security best practice.
 </li>
 <li>
 Establish a close collaborative working relationship with the Data Governance team.
 </li>
 <li>
 Utilize the Data Governance team's technical expertise to reduce risk and enhance compliance with data regulations.
 </li>
 </ul>
 
 
 
 
 
 
 Technical Expertise
 
 
 
 
 
 
 
 
 Cloud Platforms:
 
 
 <ul>
 <li>
 Experience with AWS, GCP, and Azure, including cloud security, architecture, and management.
 </li>
 </ul>
 
 
 Security Tools:
 
 
 <ul>
 <li>
 Awareness of security tools and technologies such as SIEM (e.g., Splunk, ELK Stack), vulnerability management (e.g., Wiz, Tenable, Rapid7), WAF, DDoS protection (e.g., AWS Shield, Cloudflare), and endpoint security.
 </li>
 </ul>
 
 
 GRC Management:
 
 
 <ul>
 <li>
 Proficient in using centralized GRC management tooling.
 </li>
 </ul>
 
 
 Analytics and Reporting:
 
 
 <ul>
 <li>
 Experience in analyzing technical debt and historical incidents and generating risk insights.
 </li>
 <li>
 Ability to identify system performance patterns using observability tools.
 </li>
 </ul>
 
 
 Compliance and Governance:
 
 
 <ul>
 <li>
 Familiarity with compliance standards and frameworks such as ISO 27001, NIST, GDPR, and CCPA.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 
 
 
 Education
 
 :
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.
 </li>
 </ul>
 
 
 Experience
 
 :
 
 <ul>
 <li>
 Minimum of 3 years of experience in GRC, risk management, compliance, or a related role.
 </li>
 <li>
 Experience in the digital entertainment or VOD industry is a plus.
 </li>
 <li>
 Experience with Saudi Government's National Cybersecurity Authority (NCA) is a plus.
 </li>
 </ul>
 
 
 Skills:
 
 
 <ul>
 <li>
 Strong understanding of regulatory requirements and industry standards.
 </li>
 <li>
 Excellent analytical and problem-solving skills.
 </li>
 <li>
 Effective communication and interpersonal skills.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Professional certifications such as CRISC, CISA, or CISSP are a plus.
 </li>
 <li>
 Ability to work in a fast paced, dynamic environment.
 </li>
 </ul>
 
 
 
 
 REF: PL
 
</div>

Cyber GRC Analyst

Premier Technology

The Role
 We're seeking a skilled Network Security Expert with 5+ years of experience in Palo Alto, F5 and Forcepoint technologies. Responsibilities include: - Designing and implementing secure network architectures - Configuring and managing firewalls and intrusion prevention systems
 
Requirements
 Requirements: - 5+ years of network security experience - Strong knowledge of Palo Alto Forcepoint and F5 load balancer technologies - Excellent problem-solving and analytical skills
 
About the company
 Premier Technology Co. Ltd. is a leading Information Technology company in the Kingdom of Saudi Arabia. PT has a workforce consisting of excellent qualified IT professionals who has spread over areas of the Kingdom. PT also helps organizations stay ahead with the new technologies by offering end-to-end IT outsourcing services, business consultancy, and networking solution services. The clientele list includes a number of prestigious accounts spread over different industries. Our story started two years ago with an ambitious dream to become the leader in Information Technology solution provider in the Kingdom.

Network Security Expert

Explore 403+ Security analyst in Riyadh this September. Find roles across top companies and apply now to boost your career.