Security Analyst
Riyadh,
Saudi Arabia
Riyadh,
Saudi Arabia
About Secure Tech
Secure Tech is a system integration company in Riyadh, Saudi Arabia, specializing in security systems and technical solutions. Our commitment is to provide the best service and equipment in the technological and security fields, adhering to international standards. Our team of qualified professionals strives for development and improvement for a better future in Saudi Arabia.
Job Summary
covering the tools not yet integrated into the SIEM (Forescout NAC, Nexthink) and validating/actioning SOC escalations across the rest of the stack.
Responsibilities
- – Review and action security alerts escalated by the 3rd-party SOC from Gurucul SIEM.
- – Monitor CrowdStrike (primary EDR, ~3,600 devices) and Sentinel One (secondary POS, ~1,100 devices) console for threats not yet correlated in SIEM.
- – Monitor Vectra AI NDR alerts.
- – Review Beyond Trust PAM session logs/recordings for anomalous privileged access.
- – Monitor Cisco Duo suspicious authentication patterns (internal and 3rd-party remote users).
- – Review Proofpoint email-threat and phishing-simulation results; monitor Cloudflare WAF/DDoS events protecting the e-commerce platform.
- – Review and prioritize vulnerability findings surfaced by CrowdStrike Spotlight, and hand off remediation-worthy items to the Vulnerability Assessment Engineer.
- – Review current security solutions and policies periodically and recommend improvements.
Must Have
- – EDR triage and investigation (CrowdStrike and/or Sentinel One).
- – NDR alert analysis (Vectra AI or equivalent).
- – Familiarity with NAC (Forescout), PAM session review (Beyond Trust), and MFA platforms (Duo, Okta).
- – Email security operations (Proofpoint) and WAF/CDN security event review (Cloudflare).
- – Incident-response fundamentals and MITRE ATT&CK familiarity.
- – Familiarity with Cloudflare and F5.