{bc}
bayt

SOC Engineer L3 (DFIR)

Unknown
Riyadh, KSA
Onsite
Discovered 2 weeks ago
Security Operations Center (SOC) operationsDigital forensics and incident response (DFIR)Incident responseDigital forensics analysisSIEM engineering and tuningDetection engineering

Full Job Posting

Role overview

Experienced SOC L3 (DFIR) Engineer serving as a senior escalation point within a Security Operations Center.

The role supports protection of client environments and includes mentoring junior SOC analysts.

Responsibilities

  • Handle complex and high-severity incidents escalated from L1 and L2 analysts.
  • Lead incident response from containment through eradication and recovery.
  • Perform digital forensics on endpoints, networks, and logs to establish root cause and impact.
  • Engineer and tune SIEM use cases, correlation rules, and alerting logic to improve detection and reduce false positives.
  • Develop and maintain incident response playbooks and SOC procedures.
  • Work with the CTI team to integrate threat intelligence into detection and response workflows.
  • Mentor and guide L1 and L2 analysts.
  • Prepare incident reports and present findings to management and clients.

Requirements

  • Experienced SOC L3 (DFIR) Engineer capable of serving as a senior escalation point.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Unknown