Job Description:
1. L1 SOC / Splunk Engineer — 2 Positions
Job Title: L1 SOC / Splunk Engineer
Nationality: Saudi National
Location: Saudi Arabia
Department: Security Operations Center (SOC)
Level: L1
Positions: 2
Job Summary
We are looking for two Saudi L1 SOC / Splunk Engineers to join the Security Operations Center (SOC) team. The engineers will be responsible for monitoring security events, analyzing alerts generated through Splunk, performing initial investigation and triage, and escalating confirmed or complex security incidents to L2/L3 engineers.
Key Responsibilities
- Monitor the SOC environment and security events using Splunk Enterprise / Splunk ES.
- Perform continuous monitoring of dashboards, alerts, notable events, and security incidents.
- Conduct initial triage and investigation of security alerts.
-
Analyze logs and events from:
- Firewalls
- IDS/IPS
- EDR/Antivirus
- Windows/Linux systems
- Active Directory
- Network devices
- Cloud environments
- Applications and databases