- Riyadh
- Senior
Lead triage, investigation, and escalation of security incidents within a SOC, develop playbooks, and enhance SIEM detection capabilities.
Responsibilities
- Take ownership of security incidents and events escalated from L1 analysts
- Perform detailed triage, validation and investigation of detected and escalated security events
- Analyze and categorize events of interest according to agreed severity levels, escalation criteria and runbooks
- Correlate available security information to determine the nature, scope and potential impact of suspicious activity
- Escalate complex or high-risk incidents through the appropriate response channels
Requirements
- Nice to have: EDR
- Nice to have: SOAR
- Nice to have: Endpoint security
- Nice to have: MITRE ATT&CK
- Nice to have: Threat hunting