L3 Security Specialist (Saudi National only)

Our Culture :

At Hulool Zaintech for Information Technology, we pride ourselves on our culture, which drives everything we do. We seek individuals who share our values and wish to be part of a collaborative and innovative environment. If you are committed to driving engagement and excellence through teamwork, customer-centricity, and integrity, consider joining the Hulool Zaintech family.

Our Code of Conduct :

We adhere strictly to our code of conduct, serving as a moral compass to guide responsible behavior and ethical decision-making. It outlines policies and standards for our global operations, fostering integrity and ethical excellence. All employees review and adhere to this code annually, with new hires doing so during onboarding.

Duties and Responsibilities :

• Manage, configure, test, and integrate SIEM systems, focusing on content development such as reports, dashboards, rules, filters, and channels.
• Develop and deploy new SIEM content (use-cases) based on business needs or threat requirements, in collaboration with the engineering team.
• Conduct breach analysis and investigative activities to trace advanced threats.
• Investigate and escalate complex or high-severity security incidents.
• Serve as an escalation resource and mentor for other analysts.
• Collaborate with SIEM engineering and security teams to develop and refine correlation rules.
• Maintain expertise in advanced persistent threats, forensics, and incident response practices.
• Engage in threat hunting to identify emerging threats across internal and external sources.
• Coordinate evidence collection, documentation, and review security incident reports.
• Assist in defining and driving strategic security initiatives.
• Create and update SOC processes and procedures in collaboration with Level 1 and Level 2 analysts.
• Recommend improvements to security policies, procedures, and architecture based on operational insights.
• Generate operational and executive security reports.
• Analyze security events to verify incidents, assessing their impact and risk.
• Prepare incident analysis reports and coordinate response efforts.
• Support log integration activities and reduce false positives.
• Assist during incident containment, investigation, eradication, and recovery phases.
• Contribute data for SOC reports and metrics.
• Monitor for false positives and work with engineering to address them.
• Analyze recurring incidents and system performance, implementing corrective actions.
• Document and update playbooks and procedures.

Minimum Requirements :

#J-18808-Ljbffr