{"id":3188428,"url":"https://alion.io/job/bevatel-soc-engineer","title":"SOC Engineer","company":{"id":4451408,"name":"Bevatel","domain":"bevatel.com","url":"https://alion.io/company/bevatel","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Hardware","role_family":"Hardware","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Giza, Egypt"],"countries":["EG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-09-25T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-25T00:00:00Z","board_verified":false,"closed_at":null,"days_open":37,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":37},"description":"Bevatel is seeking a SOC Engineer to design operate and continuously improve our Security Operations Center (SOC) capabilities.\n This role is technical and operational focused on real-time threat detection incident response log engineering and SIEM/SOAR operations in a high-compliance environment.\nYou will play a critical role in protecting Bevatels telecom cloud and platform infrastructure while ensuring alignment with Saudi cybersecurity regulations and international best practices.\n\nResponsibilities:\n\nSecurity Monitoring & DetectionMonitor security events across cloud on-prem network endpoints and applications\n\nAnalyze alerts from SIEM EDR WAF IDS/IPS and cloud-native security tools\n\nReduce false positives through tuning detection rules and correlation logic\n\nDevelop and maintain use cases aligned to real attack scenarios\n\nIncident ResponseLead and execute security incident response (triage containment eradication recovery)\n\nPerform root cause analysis (RCA) and document incidents clearly\n\nCoordinate with IT DevOps Network and Management during incidents\n\nSupport post-incident reviews and lessons learned\n\nSIEM & Log EngineeringOnboard and normalize logs from:\n\n Cloud platforms\n\n Firewalls WAF VPN\n\n Identity systems\n\n Applications and databases\n\nCreate and maintain dashboards alerts and reports\n\nEnsure log retention and integrity in line with regulatory requirements\n\nThreat Intelligence & HuntingConduct proactive threat hunting\n\nTrack and analyze threat intelligence feeds\n\nMap detections to MITRE ATT&CK\n\nIdentify emerging attack patterns relevant to telecom and fin-tech environments\n\nCompliance & ReportingSupport compliance with:\n\n NCA Essential Cybersecurity Controls (ECC / CCC)\n\n SAMA Cybersecurity Framework (where applicable)\n\n CST / CITC requirements\n\n ISO 27001\n\nPrepare SOC reports metrics and evidence for audits and regulators\n\nMaintain clear SOC documentation and playbooks\n\nContinuous ImprovementEnhance SOC processes playbooks and response workflows\n\nParticipate in SOC automation (SOAR) initiatives \n\nImprove SOC maturity metrics (MTTD MTTR) and operational efficiency\n\nRequirementsTechnical Skills\nStrong understanding of:\n\n Security Operations & Incident Response\n\n Networking (TCP/IP DNS HTTP TLS)\n\n Linux systems\n\nHands-on experience with:\n\n SIEM platforms (Splunk Elastic Wazuh Sentinel QRadar etc.)\n\n EDR / Endpoint Security\n\n Firewalls WAFs IDS/IPS\n\nExperience analyzing:\n\n Logs network traffic alerts and system behavior\n\nCloud & Modern Environments\nExperience with cloud environments (AWS GCP Cloudflare)\n\nFamiliarity with containers and Kubernetes security is a plus\n\nUnderstanding of IAM API security and application logs\n\nRegulatory Awareness (Highly Preferred)\nKnowledge of Saudi cybersecurity regulations:\n\n NCA ECC / CCC\n\n SAMA CSF (for regulated environments)\n\n CST requirements\n\nExperience supporting regulatory audits is a strong advantage.\n\nQualifications\nBachelors degree in Computer Science Information Security or related field\n\n36 years experience in SOC security operations or incident response\n\nCertifications (preferred but not mandatory):\n\n GCIA GCIH GCED\n\n CEH Security\n\n ISO 27001 or SOC-related certifications\n\nSoft Skills\nStrong analytical and problem-solving skills\n\nAbility to stay calm under pressure during incidents\n\nClear documentation and communication skills\n\nTeam player with a security-first mindset\n\nHigh sense of ownership and accountability\n\nRequired Skills:\nTechnical Skills Strong understanding of: Security Operations & Incident Response Networking (TCP/IP DNS HTTP TLS) Linux systems Hands-on experience with: SIEM platforms (Splunk Elastic Wazuh Sentinel QRadar etc.) EDR / Endpoint Security Firewalls WAFs IDS/IPS Experience analyzing: Logs network traffic alerts and system behavior Cloud & Modern Environments Experience with cloud environments (AWS GCP Cloudflare) Familiarity with containers and Kubernetes security is a plus Understanding of IAM API security and application logs Regulatory Awareness (Highly Preferred) Knowledge of Saudi cybersecurity regulations: NCA ECC / CCC SAMA CSF (for regulated environments) CST requirements Experience supporting regulatory audits is a strong advantage. Qualifications Bachelors degree in Computer Science Information Security or related field 36 years experience in SOC security operations or incident response Certifications (preferred but not mandatory): GCIA GCIH GCED CEH Security ISO 27001 or SOC-related certifications Soft Skills Strong analytical and problem-solving skills Ability to stay calm under pressure during incidents Clear documentation and communication skills Team player with a security-first mindset High sense of ownership and accountability","description_format":"text","description_chars":4708,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-24T00:51:10Z"}],"visa":[],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":0.6,"p_active":0.8,"p_room":0.75,"age_days":37,"expected_fill_days":46,"reasons":["seen:37","velocity","win:late"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/bevatel-soc-engineer","json_url":"https://alion.io/job/bevatel-soc-engineer.json","meta":{"generated_at":"2026-11-01T09:37:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14897,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4451408},"rest":"https://alion.io/mcp/rest/get_company?id=4451408"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbevatel-soc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbevatel-soc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbevatel-soc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bevatel-soc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbevatel-soc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3188428}},{"tool":"search_jobs","arguments":{"company":"bevatel.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3188428},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}