<div>K20s - MEA, United Kingdom &amp; Europe is currently hiring for the region! 🌍</div><div> </div><div>Unlock your potential with K20! 🚀 We're on the lookout for passionate and driven individuals to join our innovative team. 💡 If you're ready to make an impact, work on exciting projects, and grow your career with a company that values creativity and collaboration, this opportunity is for you! 🎉</div><div> </div><div>Join the K20s family today! 👨‍👩‍👧‍👦</div><div> </div>

K20S Information Technology Est

&nbsp;
&nbsp;
&nbsp;
Job Role: SOC Analyst (L2) - KSA
Location: Kingdom of Saudi Arabia (KSA) Onsite
Experience: 3+ years&nbsp;
Employment Type: Semi-Government Sector&nbsp;
Operations: 24/7 Onsite Security Operations Center (SOC)
Contract: 1-Year Extendable Contract&nbsp;
Joining: Immediate Joiners Preferred
&nbsp;
Role Summary:
Join our dynamic L2 SOC team to provide continuous, high-quality security monitoring and incident response services for a critical semi-government entity. This role requires flexibility for 24/7 operations in a high-stakes, onsite environment.
 Key Responsibilities:
&nbsp; &nbsp;* L1 Monitoring &amp; Triage: &nbsp; &nbsp;* Perform 24/7 continuous monitoring of security tools (SIEM, EDR, Firewalls, etc.).&nbsp; &nbsp; &nbsp;* Conduct initial analysis and triage of security alerts and events.&nbsp; &nbsp; &nbsp;* Validate potential security incidents and perform basic enrichment.&nbsp; &nbsp; &nbsp;* Escalate validated incidents to the L2 team promptly and accurately.&nbsp; &nbsp; &nbsp;* Generate and maintain daily security reports and shift handover logs.&nbsp; &nbsp;
&nbsp; &nbsp;* L2 Incident Response &amp; Investigation: &nbsp; &nbsp;* Execute detailed incident investigation for escalated events.&nbsp; &nbsp; &nbsp;* Perform root cause analysis and develop mitigation strategies.&nbsp; &nbsp; &nbsp;* Apply standard playbooks and procedures for handling common incident types (malware, phishing, unauthorized access).&nbsp; &nbsp; &nbsp;* Coordinate with other IT teams for effective incident resolution and containment.&nbsp; &nbsp; &nbsp;* Assist in tuning security monitoring tools to reduce false positives.&nbsp; &nbsp;
* General: &nbsp; &nbsp;* Maintain high proficiency in the SOC environment tools and processes.&nbsp; &nbsp; &nbsp;* Document all activities, analysis, and response actions in the ticketing system. &nbsp; &nbsp;* Participate in shift rotations for 24/7 operations.
Required Skills &amp; Experience: &nbsp;* Proven experience in a Security Operations Center (SOC) environment is mandatory.&nbsp; &nbsp;* Strong hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, etc.).&nbsp; &nbsp;* Deep understanding of networking concepts, protocols, and security principles.&nbsp; &nbsp;* Knowledge of common attack vectors and threat intelligence concepts.&nbsp; &nbsp;* Excellent communication and teamwork skills.&nbsp; &nbsp;* Relevant industry certifications (e.g., Security+, CEH, CYSA+) are a plus.