SOC L1 Analyst

Managed.sa is looking for a motivated SOC L1 Analyst to join our cybersecurity operations team.

The SOC L1 Analyst will be responsible for monitoring security alerts, analyzing logs, supporting basic incident investigation, and escalating potential security incidents according to defined procedures. This is an excellent opportunity for fresh graduates or junior cybersecurity professionals who want to build their career in Security Operations.

Managed.sa is committed to building a strong cybersecurity culture and supporting organizations through trusted cybersecurity services across the Kingdom.

Key Responsibilities

• Monitor security alerts and events through SIEM and related security tools.
• Perform initial triage and analysis of security incidents.
• Review logs and identify suspicious activities.
• Support phishing email analysis and basic incident investigation.
• Escalate confirmed or suspicious incidents to L2/L3 SOC team members.
• Document incidents, findings, and actions taken.
• Follow SOC procedures, playbooks, and escalation processes.
• Stay updated on common cyber threats such as malware, phishing, brute-force attacks, and unauthorized access attempts.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.

2–3 years of experience in SOC operations, cybersecurity monitoring, IT security, or related roles.

Hands-on experience with:

• Security monitoring and alert analysis
• Log analysis
• Basic incident investigation
• Phishing email analysis
• SIEM tools
• Incident response procedures

Good understanding of network protocols such as TCP/IP, DNS, HTTP, HTTPS, and SMTP.

Good knowledge of Windows and Linux operating systems.

Familiarity with cybersecurity concepts such as malware, phishing, brute-force attacks, vulnerabilities, and threat detection.

Strong analytical and problem-solving skills.

Good communication and documentation skills.

Ability to work in shifts if required.

Preferred Certifications

• CompTIA Security+
• Cisco Certified CyberOps Associate
• OffSec Defense Analyst — OSDA
• eLearnSecurity Threat Hunting Professional — eTHP
• Any relevant SOC, SIEM, or cybersecurity certification