security operations center analyst

airtel

<div>
 
 
 
 Job Summary:
 
 
 
 
 
 
 
 The Security Operations Center (SOC) Security Analyst serves in a SOC team, is responsible for conducting information security investigations as a result of security incidents identified by the Level-1 security analysts who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone).
 
 
 
 
 
 The SOC Security Analyst is expected to have a solid understanding of information security and computer systems concepts and should be ready to work in shifts.
 
 
 
 
 
 An engineer in this position act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
 
 
 
 
 
 
 
 Job Description
 
 :
 
 
 <ul>
 <li>
 Responsible for conducting information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone),
 </li>
 <li>
 Act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
 </li>
 <li>
 Should have experience in Developing new correlation rules &amp; Parser writing
 </li>
 <li>
 Experience in Log source integration
 </li>
 <li>
 Act as the lead coordinator to individual information security incidents.
 </li>
 <li>
 Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Center.
 </li>
 <li>
 Document incidents from initial detection through final resolution.
 </li>
 <li>
 Participate in security incident management and vulnerability management processes.
 </li>
 <li>
 Coordinate with IT teams on escalations, tracking, performance issues, and outages.
 </li>
 <li>
 Works as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats.
 </li>
 <li>
 Communicate effectively with customers, teammates, and management.
 </li>
 <li>
 Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
 </li>
 <li>
 Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.
 </li>
 <li>
 Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures.
 </li>
 <li>
 Follow ITIL practices regarding incident, problem and change management.
 </li>
 <li>
 Staying up-to-date with emerging security threats including applicable regulatory security requirements.
 </li>
 <li>
 Maintain an inventory of the procedures used by the SOC and regularly evaluate the SOC procedures and add, remove, and update the procedures as appropriate
 </li>
 <li>
 Publish weekly reports to applicable teams
 </li>
 <li>
 Generate monthly reports on SOC activity
 </li>
 <li>
 Secondary skills like AV, HIPS, DCS, VA/ PT desirable
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 Required Technical Expertise
 
 
 
 <ul>
 <li>
 Must have experience in SIEM Management tool (QRADAR, SECEON)
 </li>
 <li>
 Should have certifications like, ITIL, CCNA, CEH, VA (Product) Certification, CISM
 </li>
 <li>
 Process and Procedure adherence
 </li>
 <li>
 General network knowledge and TCP/IP Troubleshooting
 </li>
 <li>
 Ability to trace down an endpoint on the network, based on ticket information
 </li>
 <li>
 Familiarity with system log information and what it means
 </li>
 <li>
 Understanding of common network services (web, mail, DNS, authentication)
 </li>
 <li>
 Knowledge of host based firewalls, Anti-Malware, HIDS
 </li>
 <li>
 General Desktop OS and Server OS knowledge
 </li>
 <li>
 TCP/IP, Internet Routing, UNIX / LINUX &amp; Windows NT
 </li>
 </ul>
 
 
</div>

Security Operations Center Analyst

Trust Arabia Administrative Services & Consultancy

About the RoleWe are seeking an experienced Security Operations Center (SOC) Analyst. The ideal candidate will have strong analytical skills, a proactive mindset, and proven experience in detecting, analyzing, and responding to cybersecurity incidents. This role combines strategic thinking with hands-on technical expertise to ensure our security defenses remain resilient against evolving threats.Key Responsibilities<ul><li>Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection tools.</li><li>Investigate, triage, and respond to security incidents, identifying root causes and implementing corrective actions.</li><li>Conduct proactive threat hunting and vulnerability assessments.</li><li>Develop and maintain incident response procedures and playbooks.</li><li>Collaborate with IT and network teams to strengthen overall security posture.</li><li>Prepare detailed reports and provide recommendations to senior management on emerging threats and mitigation strategies.</li></ul>Mandatory Requirements<ul><li>Experience: 4&ndash;7 years in a SOC Analyst or related cybersecurity role.</li><li>Language: Fluent in English (written and spoken).</li><li>Availability: Ready to join by January 26.</li><li>License: Valid driving license.</li><li>Strong hands-on experience with systems and security tools (configuration, troubleshooting, optimization).</li><li>Solid understanding of security frameworks such as MITRE ATT&amp;CK, NIST, and ISO 27001.</li><li>Proficiency with SIEM platforms like Microsoft Sentinel, Splunk, or IBM QRadar.</li></ul>Preferred Qualifications (Plus Points)<ul><li>Arabic language proficiency.</li><li>Experience in the Oil &amp; Gas sector, especially with industrial control systems (ICS) or OT security.</li><li>Relevant certifications such as GCIA, GCIH, CEH, CompTIA Security+, or CISSP.</li></ul>Soft Skills<ul><li>Excellent communication and reporting abilities.</li><li>Strong analytical and problem-solving mindset.</li><li>Ability to perform effectively under pressure in incident response scenarios.</li><li>Team-oriented, adaptable, and committed to continuous improvement.</li></ul>Job Type: Full-time

SOC Analyst

FIN Hospitality

Job Profile: Cyber Security Operations Center (SOC) Analyst (Mid&ndash;Senior Level)Location: Doha, QatarAvailability: Starting January 26 Employment Type: Full-timeTarget Salary Range (total package): 25k to 30kMandatory Requirements<ul><li>Experience: Minimum 4&ndash;7 years of experience as a SOC Analyst or in a related cybersecurity role (mid to senior level)</li><li>Language: Fluent in English (written and spoken)</li><li>Availability: Ready to join by January 26</li><li>License: Valid driving license</li><li>Strong hands-on attitude with systems and security tools, including configuration, troubleshooting, and optimization</li><li>In-depth understanding of security frameworks (MITRE ATT&amp;CK, NIST, ISO 27001, etc.)</li><li>Proficiency with SIEM tools such as Sentinel, Splunk, or QRadara</li></ul>Preferred Qualifications (Plus Points)<ul><li>Arabic speaker</li><li>Experience in the Oil &amp; Gas sector, particularly in industrial control systems (ICS) or OT security</li><li>Relevant certifications such as GCIA, GCIH, CEH, CompTIA Security+, or CISSP</li></ul>Key Responsibilities<ul><li>Monitor, analyze, and respond to security alerts from various systems and tools (SIEM, IDS/IPS, firewalls, endpoint protection, etc.)</li><li>Investigate and triage security incidents, identifying root causes and implementing corrective actions</li><li>Conduct threat hunting and vulnerability assessments to identify potential risks</li><li>Develop and maintain incident response procedures and playbooks</li><li>Collaborate with IT and network teams to improve security posture and incident response readiness</li></ul>Job Types: Full-time, PermanentPay: QAR25,000.00 - QAR30,000.00 per month

SOC (cyber security operation center) analyst (Mid–Senior Level)

Innovative Solutions

<div><h3 class="jobSectionHeader">Company Description</h3>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with operations in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our mission is to &lsquo;Bring Trust to Cyberspace&rsquo; and ensure &lsquo;Your Business, Secured&rsquo;. We offer comprehensive Cybersecurity Solutions and Services that include Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.<h3 class="jobSectionHeader">
Role Description</h3>
The SOC Analyst - Level 2 position at Innovative Solutions plays a pivotal role in our Security Operations Center (SOC). In this capacity, you will be tasked with monitoring security events, analyzing incidents, and implementing advanced response strategies to protect our clients' networks. Your expertise will guide incident response activities, enabling the identification and remediation of security threats effectively.<h3 class="jobSectionHeader">
Key Responsibilities</h3><ul>
<li>Conduct thorough analysis and investigation of security alerts and incidents.</li>
<li>Coordinate response actions and lead efforts on high-priority security incidents.</li>
<li>Utilize SIEM tools for threat detection and incident management.</li>
<li>Assist in the development of detection rules and incident response playbooks.</li>
<li>Provide mentorship and training to SOC Level 1 analysts.</li>
<li>Continuously evaluate and improve SOC processes and tools.</li>
<li>Collaborate with internal stakeholders and provide security recommendations based on analysis.</li>
</ul>Requirements<ul><li>
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li></ul><ul>
<li>A minimum of 2-4 years of experience in a SOC analyst role or similar position.</li>
<li>In-depth understanding of security technologies including SIEM, IDS/IPS, endpoint detection, and response tools.</li>
<li>Certifications such as Security+, CEH, or similar cybersecurity qualifications are advantageous.</li>
</ul>
Benefits<ul>
<li>Comprehensive training and development programs.</li>
<li>Opportunity for career growth and advancement.</li>
<li>Friendly and supportive work environment.</li></ul></div>

Security Operation Center Analyst - L2

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution HawkEye CSOC cyber command center. </li>
 <li>
 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution. </li>
 <li>
 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack. </li>
 <li>
 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation. </li>
 <li>
 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research. </li>
 <li>
 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture. </li>
 <li>
 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt. </li>
 <li>
 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations. </li>
 <li>
 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems. </li>
 <li>
 
 Ensure that corporate data and technology platform components are safeguarded from known threats. </li>
 <li>
 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools </li>
 <li>
 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources. </li>
 <li>
 
 Understanding and implementing the SOC processes and procedures. </li>
 <li>
 
 Follow standard operating procedures for detecting, classifying, and reporting. </li>
 <li>
 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff. </li>
 <li>
 
 Communicate effectively with customers, team-mates, and management. </li>
 <li>
 
 Provide input on tuning and optimization of security systems. </li>
 <li>
 
 Follow ITIL practices regarding incident, problem and change management. </li>
 <li>
 
 Document and maintain customer build documents, security procedures and processes. </li>
 <li>
 
 Stay up to date with current vulnerabilities, attacks, and countermeasures. </li>
 <li>
 
 Reviews the latest alerts to determine relevancy and urgency. </li>
 <li>
 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review. </li>
 <li>
 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.) </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 3+ years of experience of network/security architecture or operations experience </li>
 <li>
 
 Experience working on specific SOC/SIEM platforms </li>
 <li>
 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm </li>
 <li>
 
 Experience in SOAR technologies Demisto, Cybersponse, FortiSOAR, Swimlane </li>
 <li>
 
 Excellent experience in MDR or EDR </li>
 <li>
 
 Experience in using security tools commercial and open source </li>
 <li>
 
 Experience in defensive technologies NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files. </li>
 <li>
 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 GIAC Certified Intrusion Analyst (GCIA) </li>
 <li>
 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC </li>
 <li>
 
 GIAC Certified Incident Handler (GCIH) issued by GIAC </li>
 <li>
 
 Certified Ethical Hacker (CEH) issued by EC-Council </li>
 <li> </li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Nets-international Communication

Job SummaryThe SOC L1 Analyst is the first line of defense in cybersecurity operations. They are responsible for monitoring, detecting, and logging potential threats using security tools and alerting systems. The L1 Analyst performs initial triage and escalation of suspicious activity to higher levels.Key Responsibilities<ul><li>Monitor SIEM (Security Information &amp; Event Management) tools for alerts and anomalies.</li><li>Perform initial investigation and triage on security events.</li><li>Escalate confirmed or critical incidents to SOC L2.</li><li>Document incidents in ticketing systems (e.g., ServiceNow, JIRA).</li><li>Maintain logs and daily reports for incident trends.</li><li>Monitor firewalls, IDS/IPS, EDR, and antivirus systems for suspicious behavior.</li><li>Assist in phishing investigations and malware alert review.</li><li>Follow standard incident response playbooks.</li><li>Participate in shift-based 24/7 monitoring.</li></ul>Skills &amp; Knowledge<ul><li>Understanding of networking fundamentals (TCP/IP, DNS, ports, protocols).</li><li>Basic knowledge of Windows/Linux systems and security logs.</li><li>Familiarity with SIEM tools (e.g., Splunk, QRadar, Azure Sentinel).</li><li>Strong analytical and documentation skills.</li><li>Ability to work under pressure and escalate issues promptly.</li></ul>Education &amp; Certifications<ul><li>Diploma/Bachelor&rsquo;s in Cybersecurity, IT, or Computer Science.</li><li>Preferred: CompTIA Security+, EC-Council CSA, Microsoft SC-900 / SC-200, Cisco CyberOps Associate.</li><li>3 years of experience in cybersecurity or IT monitoring.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Security Operation Centre L1: 3 years (Required)</li></ul>

Security Operation Centre L1

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

Search 10000+ Security operations center analyst jobs near you this November. New roles added regularly across leading industries. Apply today.