soc analyst

Alykas

SOC Analyst &ndash; AlykasAbout AlykasAlykas is a US-based company providing intelligent, end-to-end IT and cybersecurity solutions designed for mid-market and enterprise organizations. Our mission is to deliver measurable outcomes that reduce risk, enhance operational efficiency, and turn technology into a strategic competitive advantage.We offer a comprehensive portfolio of services, including Managed IT Services, Cloud &amp; Data Center Solutions, IT Advisory &amp; Consulting, and Cybersecurity Solutions. Our team of globally experienced, culturally aligned engineers provides consistent, expert support tailored to meet the complex needs of today&rsquo;s dynamic business environments.Position OverviewAs a SOC Analyst at Alykas, you will play a critical role in safeguarding our clients against evolving cyber threats through advanced security monitoring, analysis, and incident response. Working within a multi-tenant Security Operations Center (SOC), you will support multiple clients using a range of cutting-edge cybersecurity technologies including SIEM, EDR, MFA, and more.Your responsibilities will span threat detection, incident triage, and proactive threat hunting, as well as utilizing tools such as PAM, email security, firewalls, and IAM systems to enhance client security postures. Strong communication and collaboration skills are essential, as you&rsquo;ll regularly engage with clients and internal teams to ensure swift, effective responses to security challenges.Key Responsibilities<ul><li>Monitor and analyze security alerts using SIEM platforms</li><li>Conduct initial triage, assess incident severity, and take appropriate response actions</li><li>Investigate indicators of compromise (IOCs) and document findings comprehensively</li><li>Respond to incidents following established playbooks and escalation procedures</li><li>Collaborate with cross-functional teams to resolve security incidents efficiently</li><li>Maintain accurate documentation of investigations, incidents, and remediation activities</li><li>Stay current with emerging cyber threats, technologies, and defensive strategies</li></ul>Must-Haves<ul><li>Minimum 3 years of experience in a Security Operations Center (SOC)</li><li>Proficiency with endpoint detection tools (e.g., SentinelOne, CrowdStrike, Microsoft Defender)</li><li>Hands-on experience with incident response and ticketing systems</li><li>Strong client-facing communication and reporting skills</li><li>Familiarity with firewall technologies</li><li>Fluent English communication skills, both written and verbal essential for working with Alykas&rsquo;s international clients</li></ul>Experience With<ul><li>SIEM platforms such as QRadar, Splunk, or AlienVault</li></ul>Nice-to-Haves (Plusses)<ul><li>Experience with automation platforms (SOAR) and scripting (e.g., Python)</li><li>Exposure to Vulnerability Management and SCCM</li><li>Background in Cyber Threat Hunting (CTH) or Cyber Threat Intelligence (CTI)</li><li>Relevant certifications such as Security+, CySA+, CISSP, or CEH</li><li>Knowledge of Identity and Access Management (IAM), particularly Active Directory</li></ul>Benefits<ul><li>Competitive salary based on experience</li><li>Performance-based bonus program</li><li>Comprehensive benefits package, including health insurance and paid time off</li><li>Collaborative work environment at world-class, state-of-the-art service delivery centers</li><li>Company-sponsored certifications and ongoing professional development opportunities</li><li>Unlimited lab access for hands-on learning and technical skill enhancement</li></ul>Join the Alykas MissionAt Alykas, we are driven by a shared mission &mdash; to defend digital assets, empower secure business operations, and deliver excellence in every interaction. If you&rsquo;re passionate about cybersecurity and eager to grow in a collaborative, globally engaged environment.Apply today and take the next step in your cybersecurity career with Alykas.Job Type: Full-timePay: Rs120,000.00 - Rs150,000.00 per monthLanguage:<ul><li>English (Preferred)</li></ul>Work Location: In person

SOC Analyst

Orange Tree Systems

<div>
 We're hiring a
 
 SOC Analyst / Cybersecurity Specialist
 
 to strengthen and maintain our organization's security posture across email, endpoints, networks, and monitoring systems. This is a hands-on role for someone who can independently configure, manage, and respond to security threats across the stack.
 
 
 
 Required Qualifications
 
 
 
 
 3+ years of experience in cybersecurity, network security, or a related field
 
 
 
 Strong experience with email security &mdash; spam filtering, phishing protection, SPF/DKIM/DMARC
 
 
 
 Hands-on experience configuring and managing firewalls (Fortinet, Cisco, Palo Alto, or similar)
 
 
 
 Experience with endpoint security tools (Microsoft Defender, CrowdStrike, SentinelOne, etc.)
 
 
 
 Knowledge of malware detection and incident response
 
 
 
 Familiarity with SIEM or monitoring tools (Splunk, Wazuh, etc.)
 
 
 
 Strong understanding of networking fundamentals &mdash; TCP/IP, VPNs, access control
 
 
 
 Ability to work independently and communicate clearly in English
 
 
 
 Certifications such as CompTIA Security+, CEH, CISSP, or CySA+
 
 
 
 
 Preferred Qualifications
 
 
 
 
 Experience securing Microsoft 365 or Google Workspace environments
 
 
 
 Experience with cloud security (AWS, Azure, or GCP)
 
 
 
 Background in incident response or threat analysis
 
</div>

Techbridge Consultancy Services

Job Location: Gulberg, Lahore (On-Site) Experience Required: 2&ndash;3 Years Salary: Up to 110,000 PKRResponsibilities:Tech Bridge Consultancy seeks experience in security monitoring solutions, incident response and other cybersecurity tools and technologies implementation capabilities. In your role, your duties will include the following:<ul><li>SOC monitoring coverage for any of the following shifts: EST Time 8:00am &ndash; 4:00pm (PST 5:00pm &ndash; 1:00am), 4:00pm &ndash; 12:00am (PST 1:00am &ndash; 9:00am), 12:00am &ndash; 8:00am (PST 9:00am &ndash; 5:00pm); the work week is considered a minimum of 40 hours each week. Day to day security logging and monitoring solutions; identifying false positives and detecting potential or real threats</li><li>In-depth analysis of security events, alerts and incidents</li><li>Promptly responding to customer enquiries via emails and/or phone calls; responding to security incidents and threats</li><li>Analyzing logs, network traffic and data to identify potential threats and vulnerabilities</li><li>Development security dashboards and reporting; compile threat intelligence reports and manage log data</li><li>Configuration of security tools and technologies (e.g. SIEM, EDR, VM, etc.)</li><li>Configuration of network and security appliances (e.g. Firewalls, routers, switches, HIDS, NIDS, etc.)</li><li>Endpoint security configuration (Defender, CrowdStrike, SentinelOne, Webroot, Kaspersky, etc.)</li><li>Firewall rules configuration and optimization</li><li>SIEM rules configuration (Sentinel, Splunk, LogRhythm, etc.)</li><li>Technical writing and security policy development</li><li>Staying current on industry trends, keeping up-to-date with relevant CVE&rsquo;s and the evolving threat landscape</li><li>Conducting vulnerability scans of network and applications</li><li>Keeping company systems up-to-date with current security patches</li><li>Recommending security improvements to line managers or senior management</li></ul>Requirements:<ul><li>Strong understanding of cybersecurity principles and the SOC environment</li><li>Bachelor&rsquo;s degree in cyber security, computer sciences or equivalent</li><li>Good understanding of vulnerability management tools and techniques</li><li>Good understanding of Windows, Linux and macOS operating systems and endpoints</li><li>Knowledge of modern problem-solving skills, and keen attention to detail</li><li>Good understanding of the modern security in SDLC practices</li><li>Capable of Balancing multiple priorities and remaining flexible in a changing environment</li><li>Good communication and interpersonal skills</li><li>Familiarity with regulatory compliance and security standards (ISO27001, SOC 2 TYPE 1 and TYPE 2, NERC CIP, IE 62443, NIST CSF, etc.)</li></ul>Other duties may include:&middot; Contribute to the preparation of technical documentation, including proposals, tenders, RFPs (Requests for Proposals), and RFIs (Requests for Information)&middot; Participate in business development activities directly related to the sale of cybersecurity services and other tasks supporting the delivery of cybersecurity products and services&middot; Personnel are required to work on-site; remote or hybrid work options will not be available&middot; Personnel must strictly use company-provided computer assets, hardware, and licensed software to perform all assigned services&middot; Personnel must not work more than 12 consecutive hours per shift&middot; Personnel are required to adhere to internal cybersecurity and IT policies and standards&middot; Personnel are required to strictly uphold confidentiality and integrity clauses while dealing with all customer dataJob Type: Full-timeApplication Question(s):<ul><li>Are you comfortable working onsite in any of the following SOC shift timings?</li><li>Are you comfortable with an on-site role, as this position is not remote or hybrid?</li><li>Are you familiar with any security compliance standards like ISO 27001, SOC 2, or NIST?</li><li>Are you fluent in English, both written and spoken?</li><li>Are you from Lahore? (Yes/No)</li></ul>Work Location: In person

Architecture In Motion

<div>Job Title: SOC Analyst &ndash; Level 2

Location: Pakistan (Remote)

Employment Type: Full-time

Work Model: Remote (24/7 Shift Rotation) 
About Us:

Arancia is a Canadian Cybersecurity Consulting, Advisory and Technology firm based in Mississauga, Ontario. Our team consists of geographically diverse professionals dedicated to solving complex cybersecurity challenges.

Offering a robust set of services across the IT and Cybersecurity landscape, supported by our proprietary security platform DarkSense, Arancia delivers high-quality security solutions across industries such as Healthcare, Financial Services, and Critical Infrastructure to a global client base.

Operating a modern 24/7 Security Operations Center, we combine advanced tooling with an evolving Agentic SOC platform to reduce noise, improve detection quality, and enable analysts to focus on meaningful investigations.

If you are interested in working in a fast-paced, growing cybersecurity environment with a strong focus on innovation, investigation quality, and operational excellence, this role is for you. 
Job Summary:

We are seeking a skilled and highly motivated SOC Analyst &ndash; Level 2 to join our Security Operations team. This role is ideal for someone with hands-on experience in SOC operations, threat investigation, and incident response.

As an L2 SOC Analyst, you will take ownership of advanced triage and investigation of alerts escalated from L1, execute containment actions across customer environments, and drive detection quality through structured tuning and feedback loops.

You will work closely with L1 analysts, Detection Engineering, Incident Response, and Threat Intelligence teams, as well as our Agentic SOC platform, to reduce dwell time and false positives. During evening shifts, you will also transition into proactive threat hunting, using dedicated time blocks to identify detection gaps and improve coverage.

This role serves as a direct progression pathway into L3, Threat Hunting, Detection Engineering, or Incident Response. 
Key Responsibilities:
<ul>
<li>Alert Triage &amp; Investigation:</li>
</ul>
Perform advanced triage of alerts escalated from L1, determining true vs false positives. Investigate security events across endpoint, identity, network, and cloud telemetry. Correlate events and map adversary behavior to MITRE ATT&amp;CK while enriching findings with relevant threat intelligence context.
<ul>
<li>Incident Response Execution:</li>
</ul>
Execute or coordinate containment actions including host isolation (EDR), account disablement (Entra ID / IAM), and blocking indicators such as IPs, domains, or hashes. Partner with Incident Response teams on high-severity or multi-system incidents and document actions, timelines, and evidence with a clear chain of reasoning.
<ul>
<li>Threat Hunting:</li>
</ul>
Conduct hypothesis-driven threat hunting across endpoint, identity, and cloud datasets, particularly during evening shifts and on rotation. Convert hunt findings into new detections or tuning recommendations and maintain proper documentation of hunts and derived detections.
<ul>
<li>Detection Quality &amp; Tuning:</li>
</ul>
Provide structured feedback to Detection Engineering on false positives, detection gaps, and tuning opportunities. Validate new detection rules (Sigma, KQL, SPL, or equivalent) before production rollout and contribute to playbook authoring and continuous improvement.
<ul>
<li>Case Management &amp; Reporting:</li>
</ul>
Produce clear, complete incident reports suitable for both technical and non-technical stakeholders. Track and support SLA metrics including MTTD, MTTR, and MTTC. Participate in structured shift handovers and post-incident reviews.
<ul>
<li>Collaboration &amp; Cross-Functional Teamwork:</li>
</ul>
Collaborate closely with internal teams including Detection Engineering, Incident Response, and Threat Intelligence. Mentor L1 analysts on triage quality and investigation techniques, and contribute to internal knowledge bases and lessons-learned sessions. 
Qualifications:
<ul>
<li>Experience:</li>
</ul>
2&ndash;5 years of experience in a SOC, Incident Response, or equivalent hands-on blue team role. Demonstrable experience handling real security incidents end-to-end with a strong understanding of SOC workflows, escalation paths, and on-shift discipline.
<ul>
<li>Industry Knowledge:</li>
</ul>
Strong understanding of cybersecurity concepts including endpoint, network, identity, and cloud security. Solid grounding in MITRE ATT&amp;CK and its operational application in investigations.
<ul>
<li>Technical Skills:</li>
</ul>
Hands-on experience with at least one modern SIEM (Microsoft Sentinel, Elastic SIEM, OpenSearch, or similar) and at least one EDR solution (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or similar). Working knowledge of identity and cloud telemetry (Entra ID, Office 365, AWS/Azure logs). Proficiency in KQL is required; additional query languages such as SPL or OpenSearch DQL are a plus. Basic scripting in Python or PowerShell for automation and enrichment.
<ul>
<li>Analytical &amp; Soft Skills:</li>
</ul>
Strong investigative mindset with the ability to pivot across data sources and build timelines. Clear written communication suitable for customer-facing reports. Ability to remain calm under pressure during live incidents and shift transitions. Team-oriented with a willingness to mentor and continuously learn.
<ul>
<li>Education:</li>
</ul>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience).
<ul>
<li>Certifications:</li>
</ul>
Certifications such as BTL1, CySA+, GCIH, Microsoft SC-200, or CompTIA Security+ are considered a plus. 
Nice to Have:

Exposure to SOAR platforms (Cortex XSOAR, Shuffle, Tines), threat intelligence platforms (MISP, OpenCTI), malware analysis or sandboxing tools (Any.Run, Joe Sandbox, Cuckoo), network detection tools (Zeek, Suricata), and cloud security experience across Azure, AWS, or GCP. 
Shift Details:

This role operates on a 24/7 rotating schedule including day, evening, and night shifts. Evening shifts follow a hybrid structure combining live queue work with scheduled threat hunting blocks. Structured handovers are conducted at every shift change to ensure continuity on active incidents. Shift allowances apply for evenings, nights, weekends, and public holidays. 
Onboarding (First 30 Days):
<ul>
<li>Days 1&ndash;15 &mdash; Shadowing: 
Pair with senior analysts across shifts to observe live investigations, understand playbooks, tooling, customer environments, and escalation thresholds. No production alert ownership during this phase.</li>
<li>Days 16&ndash;30 &mdash; Supervised Queue: 
Take ownership of alerts under direct supervision. All cases are reviewed with structured feedback on triage decisions, incident response actions, and reporting quality.</li>
<li>Day 30+ &mdash; Full Ownership: 
Independently manage the queue, continue shadowing complex incidents, and rotate into threat hunting responsibilities.</li></ul> 


What a Typical Shift Looks Like:

Start by reviewing handover notes, open incidents, and any ongoing hunts. Work through the escalation queue by triaging, investigating, containing, and documenting incidents. During evening shifts, execute scheduled hunts or deep-dive into complex investigations. End the shift by updating case notes, preparing a clear handover, and flagging detection tuning opportunities. 
Why Join Us:
<ul>
<li>Modern SOC stack and tooling</li>
<li>Agentic SOC platform enabling AI-assisted triage and investigations</li>
<li>Clear career progression into L3, Threat Hunting, Detection Engineering, or IR</li>
<li>Structured onboarding and continuous learning support</li>
<li>Investigation-led culture focused on quality over ticket volume</li></ul> 


Hours:

40 hours per week (shift-based schedule) 
Compensation:

Market competitive salary based on experience &amp; qualifications.</div>

SOC Analyst - Level 2

CareCloud

<div></div><div><div>Department: INFORMATION SECURITY Experience: 3 YearsDeadline: May 31, 2026Location: BAGH, Pakistan</div><div><h4 class="jobSectionHeader">
Job Profile</h4><div>
Job Description:
We are looking for a skilled Senior SOC Analyst to strengthen our Security Operations Center at CareCloud&rsquo;s Bagh AJK office. The ideal candidate will have 3&ndash;4 years of hands-on experience in cybersecurity operations, threat monitoring, incident response, and vulnerability management. This role requires expertise in detecting, analyzing, and responding to security threats while supporting SOC operations effectively.
Key Responsibilities:
<ul><li>Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection systems.</li>
<li>Investigate and respond to security incidents, including containment, remediation, and documentation.</li>
<li>Conduct vulnerability assessments and assist in penetration testing exercises.</li>
<li>Maintain detailed incident logs and prepare reports for management.</li>
<li>Support the SOC Manager in developing and refining SOC processes and workflows.</li>
<li>Stay updated on emerging cyber threats, attack vectors, and mitigation techniques.</li>
<li>Collaborate with IT, network, and application teams to resolve security issues.</li>
<li>Assist in training and mentoring junior SOC Analysts.</li>
</ul>
</div><div><h4 class="jobSectionHeader">Tools / Skills</h4><div>
Experience:
<ul><li>3&ndash;4 years in SOC operations, cybersecurity monitoring, or incident response roles.</li>
<li>Hands-on experience with SIEM, IDS/IPS, endpoint protection, and firewall management.</li>
<li>Exposure to penetration testing, vulnerability management, and ethical hacking preferred.</li>
</ul>
Skills:
<ul><li>Strong analytical and problem-solving skills.</li>
<li>Knowledge of cybersecurity frameworks like NIST, ISO 27001, or MITRE ATT&amp;CK.</li>
<li>Ability to prioritize and manage multiple security incidents simultaneously.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Proactive and able to work with minimal supervision.</li>
</ul>
Qualifications:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field.</li>
<li>Relevant certifications preferred: CEH, OSCP, CISSP (Associate), or CompTIA Security+.</li></ul></div></div></div></div>
 <div><h5 class="jobSectionHeader">Additional Information</h5><div><div>
Total Position(s)
2 Positions</div><div>
Gender
Does not matter</div><div>
Minimum Education
Bachelors Degree</div><div>
Degree Title
Bachelors Degree</div><div>
Shift
Evening</div><div>
Nature of Job
Work From Office</div></div></div>

Senior Soc Analyst

Arwen Tech

<div>
 Posted on Apr 16, 2026
 
 
 Title
 
 
 SOC L2 Analyst
 
 
 Apply before
 
 
 May 30, 2026
 
 
 City
 
 
 Karachi
 
 
 
 Responsibilities
 
 
 
 Summary of Job Profile:
 
 
 The SOC L2 Analyst plays a critical role in the proactive defense of the organization's security posture. This individual will leverage their technical expertise and analytical skills to investigate complex security incidents, identify attack patterns, and implement effective countermeasures. The SOC L2 Analyst serves as an escalation point for Tier 1 analysts and contributes to the continuous improvement of SOC processes and security tools.
 
 
 
 Essential Duties &amp; Responsibilities
 
 
 
 <ul>
 <li>
 Monitor security events and alerts generated by various security tools (e.g., SIEM, IDS/IPS, EDR) and escalate complex or high-severity incidents as necessary.
 </li>
 <li>
 Conduct in-depth analysis of security incidents to determine root cause, scope, and impact.
 </li>
 <li>
 Perform threat hunting activities to proactively identify potential security threats that may evade automated detection.
 </li>
 <li>
 Implement containment and remediation strategies for security incidents, including isolating affected systems, blocking malicious traffic, and removing malware.
 </li>
 <li>
 Analyze malware samples and understand their behavior.
 </li>
 <li>
 Develop and refine security incident response procedures and playbooks.
 </li>
 <li>
 Collaborate with Tier 1 analysts, providing guidance and support in incident analysis and handling.
 </li>
 <li>
 Escalate incidents to Tier 3 analysts or other relevant teams (e.g., IR, Engineering) when necessary.
 </li>
 <li>
 Document all incident analysis, containment, and remediation activities in detail.
 </li>
 <li>
 Contribute to the tuning and optimization of security tools and alerting rules.
 </li>
 <li>
 Stay up-to-date on the latest cyber threats, attack techniques, and security vulnerabilities, potentially considering threat trends.
 </li>
 <li>
 Participate in post-incident reviews to identify lessons learned and improve incident response processes.
 </li>
 <li>
 Assist in the development and delivery of security awareness training materials.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 Knowledge, Skills, Abilities (KSA&rsquo;s) required to successfully perform the job:
 
 
 
 Knowledge
 
 
 
 <ul>
 <li>
 Strong understanding of TCP/IP and other networking protocols.
 </li>
 <li>
 In-depth knowledge of common cyber threats, attack vectors, and malware types.
 </li>
 <li>
 Familiarity with various security tools and technologies (e.g., SIEM, IDS/IPS, EDR, firewalls, web proxies).
 </li>
 <li>
 Understanding of operating system security (Windows, Linux).
 </li>
 <li>
 Knowledge of security event analysis and correlation techniques.
 </li>
 <li>
 Knowledge of incident response processes and methodologies.
 </li>
 <li>
 Awareness of relevant security regulations and compliance standards.
 </li>
 <li>
 Understanding of threat intelligence sources and their application.
 
 
 </li>
 </ul>
 
 Skills
 
 
 
 <ul>
 <li>
 Proficient in analyzing security logs and identifying malicious activity.
 </li>
 <li>
 Strong understanding of network traffic analysis.
 </li>
 <li>
 Ability to perform basic malware analysis.
 </li>
 <li>
 Skill in using various security tools for incident investigation and response.
 </li>
 <li>
 Good understanding of scripting languages (e.g., Python, PowerShell) for automation.
 </li>
 <li>
 Ability to work effectively under pressure during security incidents
 
 
 </li>
 </ul>
 
 Abilities
 
 
 
 <ul>
 <li>
 Ability to analyze complex security events and identify root causes.
 </li>
 <li>
 Ability to implement effective containment and remediation strategies.
 </li>
 <li>
 Ability to correlate data from various security tools to gain a comprehensive understanding of incidents.
 </li>
 <li>
 Ability to document security incidents clearly and concisely.
 </li>
 <li>
 Ability to learn and adapt to new security threats and technologies.
 </li>
 <li>
 Ability to work independently and as part of a team.
 </li>
 <li>
 Ability to follow established procedures and guidelines
 
 
 </li>
 </ul>
 
 Education, Experience, Licensure, Certification Required For The Position
 
 
 
 <ul>
 <li>
 Bachelor's degree in Computer Science, Information Security, or a related field.
 </li>
 <li>
 3-5 years of experience in a Security Operations Center (SOC) environment, with demonstrable experience in incident analysis and response
 </li>
 <li>
 Relevant security certifications such as CompTIA CySA+, Security+, CEH, or vendor-specific certifications (e.g., Splunk Core Certified User/Power User) are desirable.
 
 
 </li>
 </ul>
 
 Competencies Required To Successfully Perform The Job
 
 
 
 Technical Competencies
 
 
 Behavioral/General Competencies
 
 
 <ul>
 <li>
 SIEM Analysis &amp; Management
 </li>
 <li>
 Basic Malware Analysis
 </li>
 <li>
 Scripting for Automation (e.g., Python, PowerShell)
 </li>
 <li>
 Network Traffic Analysis
 </li>
 <li>
 Endpoint Detection &amp; Response (EDR) Analysis
 </li>
 <li>
 Analytical Thinking
 </li>
 <li>
 Problem Solving
 </li>
 <li>
 Communication (verbal and written)
 </li>
 <li>
 Attention to Detail
 </li>
 <li>
 Responsible
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Excellent Salary
 </li>
 <li>
 Fuel Allowance
 </li>
 <li>
 Internet Allowance
 </li>
 <li>
 Medical Insurance
 </li>
 <li>
 Annual Leaves
 </li>
 <li>
 Provident Fund
 </li>
 <li>
 EOBI
 </li>
 <li>
 Annual Bonus
 </li>
 </ul>
</div>

SOC L2 Analyst

PROZ TECHNOLOGIES

Job Title: SOC L2 Analyst (OT Security) Location: Doha, Qatar (On-site)About the RoleWe are looking for an experienced SOC L2 Analyst to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on advanced threat monitoring, incident investigation, and response across both IT and Operational Technology (OT) environments.This is an excellent opportunity for cybersecurity professionals with strong SIEM and incident handling experience, especially those with exposure to industrial/OT security systems.Key Responsibilities<ul><li>Investigate and analyze security alerts and incidents, including escalations from L1 analysts</li><li>Perform in-depth threat analysis across IT and OT environments</li><li>Act as an incident responder for security events and recommend remediation actions</li><li>Monitor and manage SIEM alerts, logs, and SOC tickets within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor junior SOC analysts (L1)</li><li>Collaborate with internal teams to improve threat detection and response capabilities</li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul>Required Skills &amp; Experience<ul><li>Minimum 5+ years of experience in SOC / Cybersecurity operations</li><li>Strong experience with SIEM tools (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in incident detection, investigation, and response</li><li>Strong knowledge of network security, logs, and attack patterns</li><li>Experience with security tools such as EDR, IDS/IPS, Firewalls, Vulnerability Scanners</li><li>Familiarity with MITRE ATT&amp;CK framework</li><li>Good understanding of Windows, Linux, and network environments</li></ul>Preferred (Nice to Have)<ul><li>Experience with OT / ICS / SCADA security environments</li><li>Knowledge of protocols like Modbus, DNP3, BACnet</li><li>Exposure to industrial cybersecurity frameworks</li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul>Certifications (Preferred)<ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul>Ideal Candidate<ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in MSSP or enterprise SOC environments</li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a 24x7 SOC environment</li></ul>Job Type: PermanentPay: Up to QAR15,000.00 per monthWork Location: In person

SOC L2 Analyst (OT Security)

Search 2255+ Soc analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

2255 soc analyst jobs Near Me

SOC Analyst

SOC Analyst

SOC Analyst

SOC Analyst - Level 2

Senior Soc Analyst

SOC L2 Analyst

SOC L2 Analyst (OT Security)