business analyst

it support services , l1

ksa security mgr

offensive cybersecurity consultant Jobs in Riyadh

offensive cybersecurity consultant

principal consultant – soc transformation and xsiam deployment Jobs in Riyadh

principal consultant – soc transformation and xsiam deployment

security operations center soc analyst level 2 l2

Accenture

<div><div><p><b>Job Summary</b></p><p>
The SOC L2 Analyst provides advanced security monitoring, incident investigation, and response across client environments. This role requires strong analytical skills, hands‑on experience with SIEM/EDR platforms, and the ability to manage escalated incidents from identification through remediation. The analyst also interfaces with various technical teams, drives improvements in SOC processes, and ensures defensive measures are aligned with emerging threats</p><p></p><div><div><p><b>
Key Responsibilities</b></p><p><b>
Security Monitoring &amp; Incident Handling</b></p><ul><li><p>
Lead the investigation of security incidents escalated from Level 1, validating initial analysis and identifying missing or inaccurate details.</p></li><li><p>
Manage the full incident lifecycle including identification, triage, containment, remediation, and closure.</p></li><li><p>
Perform in‑depth analysis of security alerts, logs, and events across SIEM, EDR, firewall, network, and cloud telemetry.</p></li><li><p>
Conduct root‑cause analysis, document impact, and provide actionable recommendations.</p></li><li><p>
Support major incidents and complex investigations, ensuring timely and accurate escalation.</p></li></ul><p><b>
Threat Detection &amp; Analysis</b></p><ul><li><p>
Analyze threat campaigns, attacker tactics, techniques, and procedures (TTPs), and extract indicators of compromise.</p></li><li><p>
Identify emerging threats and assess potential impact on client environments.</p></li><li><p>
Tune detection rules, correlation logic, and use cases to enhance accuracy and reduce false positives.</p></li></ul><p><b>
Platform &amp; Tool Expertise</b></p><ul><li><p>
Work with SIEM platforms (such as Splunk ES, QRadar, or equivalent) for advanced event analysis and correlation.</p></li><li><p>
Utilize EDR, IDS/IPS, sandboxing tools, and other SOC technologies to perform comprehensive investigations.</p></li><li><p>
Access and interpret elevated log sources across platforms including firewalls, endpoint logs, cloud services, and DNS telemetry.</p></li></ul><p><b>
Process Adherence &amp; Documentation</b></p><ul><li><p>
Ensure all investigations and evidence are fully documented in case management systems.</p></li><li><p>
Prepare post‑incident analysis reports with observations, lessons learned, and improvement recommendations.</p></li><li><p>
Adhere to SOC processes, SLAs, and quality standards while contributing to their ongoing enhancement.</p></li></ul><p><b>
Collaboration &amp; Communication</b></p><ul><li><p>
Coordinate closely with internal teams including SecOps, Network, Cloud, Platform Engineering, and Threat Intelligence.</p></li><li><p>
Engage resolver teams to support containment or remediation activities as required.</p></li><li><p>
Communicate technical findings clearly to both technical and non‑technical stakeholders.</p></li></ul></div></div></div></div><p></p>
<br>
<div><div><p><b>Required Skills &amp; Qualifications</b></p><p><b>
Experience</b></p><ul><li><p>
4&ndash;8 years of experience in SOC operations, security monitoring, and incident response.</p></li><li><p>
Strong experience with SIEM, EDR, intrusion detection systems, and threat analysis tools.</p></li><li><p>
Solid background in network security, log analysis, and event correlation.</p></li><li><p>
Exposure to cloud environments such as AWS, Azure, or Google Cloud.</p></li></ul><p><b>
Technical Expertise</b></p><ul><li><p>
Understanding of network protocols, security architectures, and endpoint behaviors.</p></li><li><p>
Experience in threat hunting, IOC analysis, and basic forensic triage.</p></li><li><p>
Ability to analyze large datasets from multiple telemetry sources.</p></li></ul><p><b>
Certifications (Preferred)</b></p><ul><li><p>
GCIA, GCIH, GREM, CEH, GCFA, CISSP, Security+, or equivalent security certifications.</p></li></ul><p><b>
Soft Skills</b></p><ul><li><p>
Strong written and verbal communication skills.</p></li><li><p>
Ability to work under pressure and manage incidents in high‑volume SOC environments.</p></li><li><p>
Analytical mindset with excellent problem‑solving capabilities and attention to detail.</p></li></ul><p><b>
Why Accenture Security</b></p><p>
The role provides exposure to enterprise‑scale environments, complex cyber incidents, and advanced security technologies. SOC L2 Analysts benefit from continuous learning, defined career progression paths, and collaboration with global cybersecurity experts across Accenture&rsquo;s delivery network.</p></div></div><p></p>

Security Operations Center (SOC) Analyst – Level 2 (L2)

Accenture Middle East

<div>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The SOC L2 Analyst provides advanced security monitoring, incident investigation, and response across client environments. This role requires strong analytical skills, hands‑on experience with SIEM/EDR platforms, and the ability to manage escalated incidents from identification through remediation. The analyst also interfaces with various technical teams, drives improvements in SOC processes, and ensures defensive measures are aligned with emerging threats
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Security Monitoring &amp; Incident Handling
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Lead the investigation of security incidents escalated from Level 1, validating initial analysis and identifying missing or inaccurate details.
  <br/>
 </li>
 <li>
  Manage the full incident lifecycle including identification, triage, containment, remediation, and closure.
  <br/>
 </li>
 <li>
  Perform in‑depth analysis of security alerts, logs, and events across SIEM, EDR, firewall, network, and cloud telemetry.
  <br/>
 </li>
 <li>
  Conduct root‑cause analysis, document impact, and provide actionable recommendations.
  <br/>
 </li>
 <li>
  Support major incidents and complex investigations, ensuring timely and accurate escalation.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Threat Detection &amp; Analysis
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Analyze threat campaigns, attacker tactics, techniques, and procedures (TTPs), and extract indicators of compromise.
  <br/>
 </li>
 <li>
  Identify emerging threats and assess potential impact on client environments.
  <br/>
 </li>
 <li>
  Tune detection rules, correlation logic, and use cases to enhance accuracy and reduce false positives.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Platform &amp; Tool Expertise
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Work with SIEM platforms (such as Splunk ES, QRadar, or equivalent) for advanced event analysis and correlation.
  <br/>
 </li>
 <li>
  Utilize EDR, IDS/IPS, sandboxing tools, and other SOC technologies to perform comprehensive investigations.
  <br/>
 </li>
 <li>
  Access and interpret elevated log sources across platforms including firewalls, endpoint logs, cloud services, and DNS telemetry.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Process Adherence &amp; Documentation
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Ensure all investigations and evidence are fully documented in case management systems.
  <br/>
 </li>
 <li>
  Prepare post‑incident analysis reports with observations, lessons learned, and improvement recommendations.
  <br/>
 </li>
 <li>
  Adhere to SOC processes, SLAs, and quality standards while contributing to their ongoing enhancement.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Collaboration &amp; Communication
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Coordinate closely with internal teams including SecOps, Network, Cloud, Platform Engineering, and Threat Intelligence.
  <br/>
 </li>
 <li>
  Engage resolver teams to support containment or remediation activities as required.
  <br/>
 </li>
 <li>
  Communicate technical findings clearly to both technical and non‑technical stakeholders.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 <strong>
  Required Skills &amp; Qualifications
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  4&ndash;8 years of experience in SOC operations, security monitoring, and incident response.
  <br/>
 </li>
 <li>
  Strong experience with SIEM, EDR, intrusion detection systems, and threat analysis tools.
  <br/>
 </li>
 <li>
  Solid background in network security, log analysis, and event correlation.
  <br/>
 </li>
 <li>
  Exposure to cloud environments such as AWS, Azure, or Google Cloud.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Technical Expertise
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Understanding of network protocols, security architectures, and endpoint behaviors.
  <br/>
 </li>
 <li>
  Experience in threat hunting, IOC analysis, and basic forensic triage.
  <br/>
 </li>
 <li>
  Ability to analyze large datasets from multiple telemetry sources.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Certifications (Preferred)
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  GCIA, GCIH, GREM, CEH, GCFA, CISSP, Security+, or equivalent security certifications.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Soft Skills
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Strong written and verbal communication skills.
  <br/>
 </li>
 <li>
  Ability to work under pressure and manage incidents in high‑volume SOC environments.
  <br/>
 </li>
 <li>
  Analytical mindset with excellent problem‑solving capabilities and attention to detail.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Why Accenture Security
  <br/>
  <br/>
 </strong>
 The role provides exposure to enterprise‑scale environments, complex cyber incidents, and advanced security technologies. SOC L2 Analysts benefit from continuous learning, defined career progression paths, and collaboration with global cybersecurity experts across Accenture&rsquo;s delivery network.
 <br/>
 <br/>
</div>


Giza Systems EG

<div><h4 class="jobSectionHeader"><b>Job Description</b></h4>
<p></p><div><p>The L1 SOC Analyst serves as the first line of defense within the Security Operations Center, responsible for monitoring, triaging, and escalating security alerts in accordance with defined procedures and SLAs. The role focuses on initial alert investigation, incident logging, and ensuring accurate and timely escalation to higher-tier analysts when required.</p>
<p>
Responsibility:</p>
<ul>
<li>Serve as the first SOC tier to monitor and triage security alerts.</li>
<li>Ensure threat alerts are contextually analyzed and escalated to the next SOC tier when deeper analysis is required.</li>
<li>Provide feedback and comments on relevant data quality and visibility issues.</li>
<li>Monitor and report on the health of the data collection and log ingestion pipelines.</li>
<li>Log security incidents accurately and ensure adequate information is available for L2/L3 analysts.</li>
<li>Generate and distribute scheduled and ad-hoc SOC reports.</li>
<li>Operate independently to investigate and escalate alerts in line with operational requirements and SLA commitments.</li>
<li>Adhere to SOC processes, playbooks, and incident handling procedures.</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Personal Skills</b></h4>
<p></p><div><ul><li>Excellent communication skills</li>
<li>Excellent problem-solving skills.</li>
<li>Ability to support and balance own time among multiple tasks, and lead junior staff when required</li>
<li>Ability to successfully interface with clients (internal and external)</li>
<li>Ability to document and explain technical details in a concise, understandable manner</li>
<li>Excellent command of English</li>
</ul><ul><li>Ability to work independently and as part of a team</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Technical Skills</b></h4><br>
 <p></p><div><p><br>
Previous hands-on experience with SIEM technologies (e.g., QRadar, Splunk, LogRhythm, Elastic SIEM).
 <br>
Good knowledge of operating systems, primarily Windows and Linux.
 <br>
Good understanding of networking protocols, concepts, and technologies.
<br>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent practical experience.
<br>
Security certifications such as Security+, GSEC, CEH, or similar are a plus.
<br>
Experience in programming or scripting (e.g., Python, PERL, Java, Shell, PowerShell).
<br>
Previous experience working as a systems or network administrator.
<br>
Experience configuring or supporting network security solutions (e.g., SIEM, firewalls, IDS/IPS).
<br>
Exposure to incident response and digital forensics activities.
<br>
Previous experience as a penetration tester is an added advantage.<br>
<br>
<br>
</p></div><p></p><h4 class="jobSectionHeader"><b>Education</b></h4>
<div><p>Bachelor&rsquo;s in computer science, Digital Forensics, Engineering, other related field, or equivalent</p></div></div><p></p>
<br><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Riyadh, Saudi Arabia</div>
</div><div><div>Company Industry</div>
<div>IT Services</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Engineering</div>
</div><div><div>Employment Type</div>
<div>Employee</div>
</div><div><div>Job Division</div>
<div>Jafeer</div></div></div>
<br><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Entry Level</div>
</div><div><div>Years of Experience</div>
<div>Min: 1 Max: 2</div>
</div><div><div>Residence Location</div>
<div>Saudi Arabia</div>
</div><div><div>Nationality</div>
<div>Saudi Arabia</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

L1 SOC Analyst

SOC Level 2

Tamkeen Technologies

<div><h3 class="jobSectionHeader"><b>Roles and Responsibilities:
</b></h3><ul><li>Lead and coordinate the response to critical and complex security incidents, guiding SOC L1 and L2 analysts during investigations.</li>
<li>Conduct advanced incident analysis and provide actionable recommendations for incident containment.</li>
<li>Proactively hunt for advanced threats, APTs, and sophisticated attack patterns within client networks.</li>
<li>Perform in-depth cyber threat analysis to understand attack vectors and tactics, techniques, and procedures (TTPs) used by threat actors.</li>
<li>Conduct advanced digital forensics and memory analysis to identify root causes and perform post-incident investigations.</li>
<li>Perform detailed malware analysis and reverse engineering to understand malware behavior and capabilities.</li>
<li>Integrate threat intelligence from various sources into the MSSP&rsquo;s security operations to improve threat detection and response effectiveness.</li>
<li>Collaborate with threat intelligence teams to enhance the MSSP&rsquo;s threat intelligence capabilities.</li>
<li>Develop and update incident response playbooks and standard operating procedures (SOPs) to address emerging threats.</li>
<li>Provide cybersecurity consulting and advisory services to clients, offering strategic guidance on security best practices and risk management.</li>
<li>Act as a primary point of contact for key clients, ensuring effective communication and a clear understanding of their security needs.</li>
<li>Build strong relationships with clients by understanding their business goals and aligning MSSP services accordingly.</li>
<li>Establish and track key SOC performance metrics, incident trends, and key performance indicators (KPIs).</li>
<li>Provide regular reports to MSSP management, clients, and stakeholders.</li>
<li>Provide strong leadership to SOC L1 and L2 analysts, fostering a collaborative and high-performing team environment.</li>
<li>Mentor junior analysts, guiding their career development and enhancing their technical skills.</li>
<li>Collaborate with internal MSSP teams such as threat intelligence, threat hunting, and engineering to enhance overall client security posture.</li>
</ul><h3 class="jobSectionHeader"><b>Technical Skills</b></h3><ul>
<li>In-depth knowledge of networking concepts, TCP/IP, network protocols, security architecture, and modern security technologies.</li>
<li>Proficiency in using SIEM, IDS/IPS, firewalls, EDR, and other security tools.</li>
<li>Advanced skills in scripting and programming languages for automation and analysis.</li>
<li>Strong analytical skills to investigate complex security incidents and devise effective solutions.</li>
<li>Excellent verbal and written communication skills to document incidents, write reports, and interact with team members, stakeholders, and clients.</li>
<li>Previous experience in leading and managing a team of cybersecurity professionals.</li>
<li>Deep understanding of threat intelligence sources, threat actors, and advanced cyber-attack techniques. Proven experience in leading incident response efforts for complex incidents.</li>
<li>Strong experience in digital forensics, memory analysis, and advanced malware analysis.</li>
</ul><h3 class="jobSectionHeader"><b>Qualifications</b></h3><p><b>
Education:</b> Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Technology, or a related field is typically required.</p><p><b>
Certifications:</b> Hold one or more certifications such as, GCFA, GCIA, GCIH, GREM</p><p><b>
Experience:</b> Minimum of 5 years or more of progressive experience in a cybersecurity role, with extensive hands-on experience in a SOC environment.</p></div>

Cybersecurity Operations Center

Palo Alto Networks

<div>
 <strong>
  Our Mission
  <br/>
  <br/>
 </strong>
 At Palo Alto Networks&reg; everything starts and ends with our mission:
 <br/>
 <br/>
 Being the cybersecurity partner of choice, protecting our digital way of life.
 <br/>
 <br/>
 Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
 <br/>
 <br/>
 <strong>
  Who We Are
  <br/>
  <br/>
 </strong>
 We believe collaboration thrives in person. That&rsquo;s why most of our teams work from the office full time, with flexibility when it&rsquo;s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Your Career
  <br/>
  <br/>
 </strong>
 Your Career As a Principal Consultant for SOC Transformation &amp; XSIAM Deployment, you will be a seasoned leader at the forefront of our most strategic customer engagements. You will leverage a rare blend of consultative presence, deep technical mastery, and executive influence to guide our customers through complex SOC transformations. Your primary role is to drive these large-scale programs, ensuring the successful execution of foundational elements like seamless log migration and the development of sophisticated detection strategies, to deliver measurable security outcomes in highly dynamic enterprise environments.
 <br/>
 <br/>
 <strong>
  Your Impact
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM
  </li>
  <li>
   Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform
  </li>
  <li>
   Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization
  </li>
  <li>
   Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform
  </li>
  <li>
   Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats
  </li>
  <li>
   Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy
  </li>
  <li>
   Identify opportunities to enhance analyst alert handling and response through automation.
  </li>
  <li>
   Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement
  </li>
  <li>
   Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise
  </li>
  <li>
   Partner with Product and R&amp;D teams to incorporate field insights into roadmap priorities
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Your Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR
  </li>
  <li>
   Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO
  </li>
  <li>
   Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations
  </li>
  <li>
   10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments
  </li>
  <li>
   8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows
  </li>
  <li>
   Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence
  </li>
  <li>
   Ability to conceive, architect, and develop effective correlation and detection rules
  </li>
  <li>
   Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.
  </li>
  <li>
   Strong expertise in Regular Expressions (Regex)
  </li>
  <li>
   Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus
  </li>
  <li>
   Must be able to travel up to 30%
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Additional Information
  <br/>
  <br/>
 </strong>
 <strong>
  The Team
  <br/>
  <br/>
 </strong>
 Our professional services team is critical to our success and mission. As part of this team, you enable customer success by providing support to clients post-sale. Our dedication to our customers doesn&rsquo;t stop once they sign &ndash; it evolves.
 <br/>
 <br/>
 As threats and technology evolve, we stay in step to accomplish our mission. You&rsquo;ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised. But you won&rsquo;t wait for them to be raised, you&rsquo;ll seek them out, too. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.
 <br/>
 <br/>
 <strong>
  Our Commitment
  <br/>
  <br/>
 </strong>
 We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
 <br/>
 <br/>
 We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
 <br/>
 <br/>
 Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
 <br/>
 <br/>
 All your information will be kept confidential according to EEO guidelines.
</div>


Principal Consultant – SOC Transformation and XSIAM Deployment

<div><b>Company Description</b><p><b><br>
Our Mission</b></p><p>
At Palo Alto Networks&reg; everything starts and ends with our mission:</p><p>
Being the cybersecurity partner of choice, protecting our digital way of life.<br>
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.</p><p><b>
Who We Are</b></p><p>
We believe collaboration thrives in person. That&rsquo;s why most of our teams work from the office full time, with flexibility when it&rsquo;s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.</p><b><br>
Job Description</b><p><b><br>
Your Career</b></p><p>
Your Career As a Principal Consultant for SOC Transformation &amp; XSIAM Deployment, you will be a seasoned leader at the forefront of our most strategic customer engagements. You will leverage a rare blend of consultative presence, deep technical mastery, and executive influence to guide our customers through complex SOC transformations. Your primary role is to drive these large-scale programs, ensuring the successful execution of foundational elements like seamless log migration and the development of sophisticated detection strategies, to deliver measurable security outcomes in highly dynamic enterprise environments.</p><p><b>
Your Impact</b></p><ul><li>
Serve as the lead strategic advisor and subject matter expert for customers undertaking a full-scale SOC modernization with XSIAM</li><li>
Lead multi-national SOC transformation programs, consolidating fragmented detection and response processes into a unified, AI-driven platform</li><li>
Direct enterprise-scale XSIAM deployments, guiding customers from initial strategy to full operationalization</li><li>
Devise and oversee comprehensive log ingestion strategies to ensure high-quality data fuels the XSIAM platform</li><li>
Architect and implement sophisticated detection strategies and correlation rules to fortify customer defenses against advanced threats</li><li>
Fine-tune and optimize log sources and correlation rules to maximize system performance and detection efficacy</li><li>
Identify opportunities to enhance analyst alert handling and response through automation.</li><li>
Transform ambiguity into structured action plans, driving accountability at every level of a customer engagement</li><li>
Build and mentor high-performing professional services teams that blend consulting, engineering, and change management expertise</li><li>
Partner with Product and R&amp;D teams to incorporate field insights into roadmap priorities</li></ul><br>
<b>
Qualifications</b><p><b><br>
Your Experience</b></p><ul><li>
A proven track record in modernizing Security Operations Centers (SOCs) to achieve automation, AI-driven detection, and measurable improvements in MTTD/MTTR</li><li>
Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO</li><li>
Experience acting as a trusted advisor to senior security leaders, with the ability to diagnose challenges and deliver strategic recommendations</li><li>
10+ years of hands-on experience in deploying and integrating SIEM/security analytics solutions within large enterprise environments</li><li>
8+ years of experience with Security Operations Center (SOC) tooling, processes, and workflows</li><li>
Hands-on technical mastery across SIEM, SOAR, EDR, cloud security, and threat intelligence</li><li>
Ability to conceive, architect, and develop effective correlation and detection rules</li><li>
Familiarity with a range of SIEM technologies, such as Splunk and IBM QRadar, is a plus.</li><li>
Strong expertise in Regular Expressions (Regex)</li><li>
Relevant bachelor's degree or industry-recognized qualifications (CISSP, GIAC, etc.), is a plus</li><li>
Must be able to travel up to 30%</li></ul><br>
<b>
Additional Information</b><p><b><br>
The Team</b></p><p>
Our professional services team is critical to our success and mission. As part of this team, you enable customer success by providing support to clients post-sale. Our dedication to our customers doesn&rsquo;t stop once they sign &ndash; it evolves.</p><p>
As threats and technology evolve, we stay in step to accomplish our mission. You&rsquo;ll be involved in implementing new products, transitioning from old products to new, and will fix integrations and critical issues as they are raised. But you won&rsquo;t wait for them to be raised, you&rsquo;ll seek them out, too. We fix and identify technical problems, with a pointed focus of providing the best customer support in the industry.</p><div></div><p><b>
Our Commitment</b><br>
<br>
We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.</p><p>
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.</p><p>
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.</p><p>
All your information will be kept confidential according to EEO guidelines.</p></div>

Explore 1315+ Security operations center soc analyst level 2 l2 in Riyadh this January. Find roles across top companies and apply now to boost your career.

1315 security operations center soc analyst level 2 l2 jobs IN Riyadh

Security Operations Center (SOC) Analyst – Level 2 (L2)

Security Operations Center (SOC) Analyst – Level 2 (L2)

L1 SOC Analyst

SOC Level 2

Cybersecurity Operations Center

Principal Consultant – SOC Transformation and XSIAM Deployment

Principal Consultant – SOC Transformation and XSIAM Deployment