Job summary
SOC L2 Specialist at Müller`s Solutions in Riyadh responsible for handling alerts escalated from L1, leading incident response and supervising daily SOC operations. The role performs deep log and network analysis, tunes SIEM rules, conducts threat hunting and prepares incident reports compliant with NCA requirements.
Key responsibilities
- Investigate and triage alerts escalated from L1 analysts
- Lead incident response: containment, eradication and recovery
- Perform deep-dive analysis of logs, network traffic and endpoint telemetry
- Tune SIEM correlation rules and use cases
- Run threat hunting using threat intelligence and MITRE ATT&CK
- Create and maintain incident response playbooks and SOAR workflows
- Supervise and mentor L1 analysts and manage shift handovers
- Write incident reports and report incidents per NCA and escalation matrix
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, IT or related field
- 4–6 years in a SOC, with at least 2 years at L2 level
- Strong hands-on SIEM experience (Splunk, QRadar, Sentinel or similar)
- Experience with EDR/XDR and SOAR platforms
- Knowledge of MITRE ATT&CK, cyber kill chain and network protocols
- Experience in an enterprise SOC or MSSP environment
- Saudi national, fluent in Arabic and English
- Willing to support on-call or shift rotations if required
Skills
SIEMSplunkIBM QRadarMicrosoft SentinelEDR/XDRSOARThreat huntingMITRE ATT&CKMalware analysisIncident response
Source: Workable. Last checked as open: 13 Nov 2026. You apply directly with the employer.
Apply now