soc analyst

NexionPro

Job Title: SOC Analyst (Level 2/3)Experience: 2 to 5 Years Location: Bengaluru, India Work Mode: 5 Days &ndash; Work from Office Company: NexionPro Notice Period: Immediate to 15 DaysAbout UsAt NexionPro, we&rsquo;re committed to building a safer digital future by delivering cutting-edge cybersecurity solutions. As part of our rapidly growing Security Operations Center (SOC), you&rsquo;ll be at the forefront of threat detection and incident response for some of the world&rsquo;s most dynamic businesses.Job SummaryWe are looking for a highly skilled and motivated SOC Analyst with 2 to 5 years of hands-on experience in security monitoring, incident response, and threat analysis. The ideal candidate will possess strong technical knowledge in cybersecurity tools, deep analytical thinking, and a proactive attitude toward identifying and mitigating threats.Key Responsibilities<ul><li>Monitor and analyze security alerts and logs from SIEM, IDS/IPS, EDR, firewalls, and other tools.</li><li>Investigate security incidents and execute containment, eradication, and recovery procedures.</li><li>Conduct deep-dive forensic analysis of endpoints, logs, and network traffic.</li><li>Develop and fine-tune correlation rules, dashboards, and automated detection use cases.</li><li>Document incident reports, root cause analysis, and lessons learned.</li><li>Collaborate with internal teams to enhance detection capabilities and improve incident response processes.</li><li>Mentor junior analysts and support escalation as a Tier 2/3 responder.</li><li>Contribute to threat hunting, red-blue team exercises, and continuous improvement initiatives.</li></ul>Required Skills &amp; Qualifications<ul><li>2&ndash;3+ years of experience in a SOC, incident response, or cybersecurity operations role.</li><li>Proficient with security tools such as SIEM (e.g., Splunk, QRadar), IDS/IPS, EDR (e.g., CrowdStrike, SentinelOne), firewalls, and forensic tools.</li><li>Strong understanding of network protocols, OS internals (Windows/Linux), and security architectures.</li><li>Expertise in threat detection, digital forensics, and incident response methodologies.</li><li>Proficient in scripting or automation using tools like Python, PowerShell, or similar.</li><li>Excellent critical thinking, troubleshooting, and communication skills.</li><li>Strong documentation practices and ability to work under pressure in high-stakes environments.</li></ul>Preferred Certifications (Any of the following):<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>GCIH &ndash; GIAC Certified Incident Handler</li><li>GCFA &ndash; GIAC Certified Forensic Analyst</li><li>Or other relevant advanced cybersecurity certifications</li></ul>Why Join NexionPro?<ul><li>Work with industry-leading experts and tools</li><li>High-impact projects with global clients</li><li>Continuous learning and growth opportunities</li><li>Collaborative, security-first culture</li></ul>Job Types: Full-time, PermanentPay: Up to &#8377;500,000.00 per yearApplication Question(s):<ul><li>What's your Notice Period?</li></ul>Experience:<ul><li>SOC: 2 years (Required)</li></ul>Work Location: In person

SOC Analyst

Prime System Solutions

<div>
 
 Position Title:
 
 
 Security Analyst (SOC Analyst)
 
 
 
 
 Job Type: Full-time
 
 
 
 The Security Analyst I role is a critical position within the organization. The primary function of the role will be to provide monitoring of deployed customer environments for security events. This includes establishing the extent of a threat, the business impact, and advising the most suitable course of action to contain and remedy the event. A Cybersecurity Technician will serve as an escalation point to the subject matter expert for in-depth cybersecurity events and must be able to communicate effectively to all stakeholders during the event management process.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Manage the security event monitoring and incident response ticket queues and triage as appropriate to meet the established service level agreements
 </li>
 <li>
 Promptly transfer cybersecurity tickets to the client or internal point of contact
 </li>
 <li>
 Clearly convey indicators of compromise, isolation, and remediation steps
 </li>
 <li>
 Analyze and interpret system, security, and application logs in order to diagnose faults, spot abnormal behavior, and rule out false positives
 </li>
 <li>
 Effectively utilize End Detection and Response tools to investigate alerts, anomalies, and build accurate timelines related to possible compromise
 </li>
 <li>
 Follow established procedures to investigate, escalate, contain, or eradicate malicious activity
 </li>
 <li>
 Develop and deliver written and oral reports to clients, teammates, and management to aggregate and communicate security information and metrics
 </li>
 <li>
 Provide input and recommendations to improve internal processes and procedures related to SOC duties and responsibilities
 </li>
 <li>
 Participate in threat-hunting activities and other special projects as required
 </li>
 <li>
 Understand and follow, our set of standards and processes that produce a predictable result for the client. You must be aware of and maintain our standards.
 
 
 
 </li>
 </ul>
 
 Additional Responsibilities
 
 
 
 <ul>
 <li>
 Maintain accurate and real-time timesheets, record complete and accurate notes of troubleshooting and communication with clients
 </li>
 <li>
 Receive mentoring and feedback from peers and others
 </li>
 <li>
 Where appropriate, escalate complicated issues to a more senior resource or other appropriate teams
 </li>
 <li>
 Review Tickets with Manager
 </li>
 <li>
 Actively Participate in Team Huddles, L10 Meetings, One on One Meetings, and any other Team Meetings
 </li>
 <li>
 Create and update documentation when changes occur, or when discoveries are made
 </li>
 <li>
 Attend monthly training &amp; team meetings as required
 </li>
 <li>
 Additional duties as required
 
 
 
 </li>
 </ul>
 
 Skills, Knowledge, And Expertise
 
 
 
 <ul>
 <li>
 Two years work experience in the Information Security or related fields
 </li>
 <li>
 Two or more current security-related industry certifications
 </li>
 <li>
 Experience with SIEM platforms, firewall management, and endpoint detection and response platforms
 </li>
 <li>
 One year or more of experience with EDR solutions, ESGs, vulnerability management, and content filtering
 </li>
 <li>
 Good problem-solving and decision-making skills; ability to understand and analyze complex issues
 </li>
 <li>
 Self-motivated, detail-oriented, highly organized, and able to handle a variety of tasks and responsibilities in an efficient manner with a high level of quality
 </li>
 <li>
 One of the following certifications preferred: CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent
 
 </li>
 </ul>
</div>

PROZ TECHNOLOGIES

Job Title: L3 SOC Analyst Location: Doha, QatarAbout the Role: We are seeking a skilled L3 SOC Analyst to lead advanced security monitoring, incident detection, and response activities. You will be responsible for proactive threat hunting, SIEM/EDR optimization, and mentoring junior analysts to strengthen our cybersecurity posture.Key Responsibilities:<ul><li>Investigate, analyze, and resolve advanced security incidents</li><li>Manage and optimize SIEM &amp; EDR platforms</li><li>Conduct Threat Hunting activities</li><li>Escalate incidents and ensure timely resolution</li><li>Mentor and guide junior analysts</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Computer Science, IT, or related field</li><li>5+ years of SOC/Cybersecurity experience</li><li>Hands-on expertise in SIEM, IDS/IPS, and EDR</li><li>Certifications: GCDA, CISSP, GCFA, GMON desirable</li><li>Strong analytical and communication skills</li></ul>About Proztec: Proz Technologies (PROZTEC) is a leading ICT services provider in Doha, Qatar with over 300 employees. Join our dynamic team and grow your career in cybersecurity.Apply now by sending your CV in Word format to Recruitment@proztec.comJob Type: Full-timePay: QAR6,000.00 - QAR15,000.00 per month

L3 SOC Analyst

Innovative Solutions

<div><h3 class="jobSectionHeader">Company Description</h3>
Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with operations in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our mission is to &lsquo;Bring Trust to Cyberspace&rsquo; and ensure &lsquo;Your Business, Secured&rsquo;. We offer comprehensive Cybersecurity Solutions and Services that include Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.<h3 class="jobSectionHeader">
Role Description</h3>
The SOC Analyst - Level 2 position at Innovative Solutions is a critical role within our Security Operations Center (SOC). In this role, you will be responsible for monitoring and analyzing security incidents, providing advanced incident response, and collaborating with other teams to mitigate risks to our clients&rsquo; networks and systems. You will leverage your expertise to analyze threats, investigate escalated incidents, and ensure the ongoing protection of sensitive information.<h3 class="jobSectionHeader">
Responsibilities</h3><ul>
<li>Monitor security alerts and escalate incidents as necessary.</li>
<li>Root-cause analysis and mitigation.</li>
<li>Develop SIEM/SOAR use cases.</li>
<li>Mentor L1 analysts.</li>
<li>Advise on SOC process improvements.</li>
<li>Develop and recommend security policies and procedures based on analyses.</li>
<li>Participate in threat hunting activities and identify potential indicators of compromise (IOCs).</li>
</ul>Requirements<ul><li>
Bachelor's degree in Computer Science, Information Security, or a related field.</li></ul><ul>
<li>3 to 5 years of experience in a Security Operations Center or Incident Response (SOC/IR) environment.</li>
<li>Strong IDS/IPS, SIEM, EDR knowledge.</li>
<li>Relevant certifications, such as Security+, CEH, Splunk, GCIA, GCIH are preferred.</li></ul></div>

SOC Analyst- L2

turing

<div>Location: Remote - India<div><div>
About Turing

Based in Palo Alto, California, Turing is one of the world's fastest-growing AI companies accelerating the advancement and deployment of powerful AI systems. Turing helps customers in two ways: working with the world&rsquo;s leading AI labs to advance frontier model capabilities in thinking, reasoning, coding, agentic behavior, multimodality, multilingualism, STEM and frontier knowledge; and leveraging that expertise to build real-world AI systems that solve mission-critical priorities for Fortune 500 companies and government institutions. Turing has received numerous awards, including Forbes's &quot;One of America's Best Startup Employers,&quot; #1 on The Information's annual list of &quot;Most Promising B2B Companies,&quot; and Fast Company's annual list of the &quot;World's Most Innovative Companies.&quot; Turing's leadership team includes AI technologists from industry giants Meta, Google, Microsoft, Apple, Amazon, Twitter, McKinsey, Bain, Stanford, Caltech, and MIT. For more information on Turing, visit www.turing.com. For information on upcoming Turing AGI Icons events, visit go.turing.com/agi-icons.</div><h2 class="jobSectionHeader">
Job Description</h2>

Turing provides a platform that connects talents with our enterprise customers in a global marketplace. Our security engineers work on a broad set of efforts focusing on scaling and automating security infrastructure and processes. Our security engineers work on building the industry standard and implementing the best security practices in our platforms that connect enterprise environments. Our security engineers define and enforce the security protocols to operate services in a protected environment. Our security engineers also build and manage the framework for data access both internally and externally.

At Turing, we are continuously addressing the complex challenges of scaling our systems in a safe and secure manner. We are looking for passionate security engineers and leaders who are excited to solve intricate security problems in dynamic enterprise environments
<h3 class="jobSectionHeader">
Overview</h3>

We are seeking a proactive and detail-oriented Security Operation Center Analyst to join our global security operations team. Split between India and Brazil, this role is critical to strengthening our frontline cyber defense capabilities. You will be responsible for triaging alerts, conducting initial investigations, handling low-complexity incidents, and escalating critical threats. The ideal candidate thrives in a fast-paced SOC environment, has a passion for cybersecurity, and is eager to grow in incident response, threat detection, and operational support.
<h3 class="jobSectionHeader">
Responsibilities:</h3>
<ul><li>Review and analyze alerts escalated by the MDR team via Google Chronicle.</li>
<li>Perform deep-dive investigations into suspicious activity across identity, SaaS, endpoint, and cloud logs.</li>
<li>Incident response activities for medium-to-high severity incidents, including containment, eradication, and recovery (e.g., disabling user accounts, blocking malicious IPs).</li>
<li>Escalate complex or high-impact incidents to Senior Analysts / Incident Response Engineer or relevant stakeholders for further investigation.</li>
<li>Periodically audit alert rules, integrations, and logging health.</li>
<li>Coordinate with DevOps and application teams to triage vulnerability findings from Rapid7 platforms (InsightVM, CloudSec, AppSec), communicate remediation needs, and track resolution progress.</li>
<li>Own the triage and response process for security alerts from MDR, EDR, and cloud platforms, ensuring actions are taken within defined service level agreements (SLAs). Escalate potential breaches or blockers to maintain response effectiveness.</li>
<li>Suggest automation opportunities for enrichment, containment, or playbook actions.</li>
<li>Monitor the performance and availability of security tools (e.g., Google SecOps, Rapid7, EDR platforms).</li>
<li>Triage and investigate endpoint detection and response (EDR) alerts from CrowdStrike or similar tools.</li>
<li>Conduct regular threat hunting to proactively identify potential compromises.</li>
<li>Identify threat actor tactics, techniques, and procedures (TTPs) and map to MITRE ATT&amp;CK when relevant.</li>
<li>Work closely with internal stakeholders and MDR partners to iterate on SOAR automation, ensuring playbooks align with Turing&rsquo;s detection use cases and operational goals.</li>
<li>Maintain detailed documentation for each incident using approved tooling (e.g., Jira, Google Docs).</li>
<li>Provide feedback on SOAR actions and Chronicle detection rules based on observed MITRE ATT&amp;CK patterns, and suggest tuning or coverage improvements.</li>
</ul><h3 class="jobSectionHeader">Qualifications Needed:</h3>
<ul><li>Required Skills:</li>
<ul><li>3 - 5 years of hands-on experience in a Security Operations Centre (SOC) or similar cybersecurity role, ideally in a cloud-native or SaaS environment.</li>
<li>Strong grasp of alert triage, incident detection, and containment fundamentals, including how to assess severity and escalate appropriately.</li>
<li>Familiarity with SIEM, EDR, and vulnerability management platforms, with an ability to investigate and correlate findings across these tools.</li>
<li>Working knowledge of network protocols, log types, and attacker TTPs, especially across cloud and SaaS environments.</li>
<li>Ability to follow incident response playbooks and SOPs with precision.</li>
<li>Proficiency in managing security tickets and documenting investigative steps clearly.</li>
<li>Excellent analytical skills with a high attention to detail and a sense of urgency.</li>
<li>Good written and verbal communication skills, especially for documenting incidents and collaborating with peers across time zones.</li>
Excellent communication skills, both written and verbal. 
<li>
</li>
</ul><li>Good To Have:</li>
<ul><li>Experience working in a co-managed SOC or MDR-supported environment.</li>
<li>Strong understanding of alert triage, incident detection, and basic containment procedures.</li>
<li>Exposure to cloud and SaaS platform logs (e.g., Google Workspace, Okta, GitHub).</li>
<li>Familiarity with the MITRE ATT&amp;CK framework for mapping attacker techniques.</li>
<li>Basic familiarity with scripting or automation tooling, including formats like YAML, Python, Bash, Sigma, or UDM.</li>
<li>Excellent analytical skills with a high attention to detail and a sense of urgency.</li>
<li>Good written and verbal communication skills, especially for documenting incidents and collaborating with peers across time zones.</li>
<li>One or more relevant certifications (CEF Certified Ethical Hacker (CEF-CEH), CompTIA Security+, etc.).</li>
</ul></ul><div><h3 class="jobSectionHeader">Advantages of joining Turing:</h3>
<div><ul><li>Amazing work culture (Super collaborative &amp; supportive work environment; 5 days a week)</li>
<li>Awesome colleagues (Surround yourself with top talent from Meta, Google, LinkedIn etc. as well as people with deep startup experience)</li>
<li>Competitive compensation</li>
<li>Flexible working hours</li>
<li>Full-time remote opportunity</li>
</ul>
Don&rsquo;t meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. Turing is proud to be an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, disability, protected veteran status, or any other legally protected characteristics. At Turing we are dedicated to building a diverse, inclusive and authentic workplace and celebrate authenticity, so if you&rsquo;re excited about this role but your past experience doesn&rsquo;t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.</div></div></div></div>

Mindstream

Job Advertisement &ndash; L1 SOC Analyst (Level 1) Location: Qatar Duration: 3 Years Salary: Based on merit Role Summary: The L1 SOC Analyst is the first line of defense in the Security Operations Center (SOC). This role is responsible for real-time monitoring, detection, and escalation of security incidents, ensuring timely responses to potential threats. Key Responsibilities: Monitor SIEM and other security monitoring tools for alerts and suspicious activity. Perform initial triage to assess severity and potential impact of incidents. Escalate high-priority incidents to L2 Analysts or SOC Manager. Document incidents, findings, and actions taken in tracking systems. Support in basic investigations of malware, phishing, and intrusion attempts. Follow SOC playbooks and standard operating procedures. Requirements: Basic knowledge of cybersecurity concepts, threats, and attack vectors. Familiarity with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel). Understanding of TCP/IP, networking fundamentals, and operating systems. Strong analytical and communication skills. Willingness to work in 24x7 shift rotations. Experience in SOC setup, administration, and management is an advantage. Hands-on with Windows (Event Viewer, PowerShell) &amp; Linux CLI (logs, services). Ability to analyze logs from firewalls, proxies, and endpoints. Effective communication and documentation skills. Certifications (at least two required): CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk certification, or equivalent.Job Type: Full-timeApplication Question(s):<ul><li>Do you have prior experience working in a Security Operations Center (SOC)?</li><li>How many years of professional experience do you have in cybersecurity or SOC monitoring roles?</li><li>Do you hold at least two relevant cybersecurity certifications (e.g., CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk, etc.)? please mention.</li><li>Are you comfortable working in 24x7 shift rotations, including nights, weekends, and holidays?</li><li>How would you rate your knowledge of networking fundamentals (TCP/IP, DNS, HTTP, ports, subnets, firewall logic)?</li><li>What is your current and expected monthly salary (QAR)? Notice period?</li></ul>

L1 SOC Analyst (Level-1)

Job Advertisement &ndash; L1 SOC Analyst (Level 1) Location: Qatar Duration: 3 Years Role Summary: The L1 SOC Analyst is the first line of defense in the Security Operations Center (SOC). This role is responsible for real-time monitoring, detection, and escalation of security incidents, ensuring timely responses to potential threats. Key Responsibilities: Monitor SIEM and other security monitoring tools for alerts and suspicious activity. Perform initial triage to assess severity and potential impact of incidents. Escalate high-priority incidents to L2 Analysts or SOC Manager. Document incidents, findings, and actions taken in tracking systems. Support in basic investigations of malware, phishing, and intrusion attempts. Follow SOC playbooks and standard operating procedures. Requirements: Basic knowledge of cybersecurity concepts, threats, and attack vectors. Familiarity with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel). Understanding of TCP/IP, networking fundamentals, and operating systems. Strong analytical and communication skills. Willingness to work in 24x7 shift rotations. Experience in SOC setup, administration, and management is an advantage. Hands-on with Windows (Event Viewer, PowerShell) &amp; Linux CLI (logs, services). Ability to analyze logs from firewalls, proxies, and endpoints. Effective communication and documentation skills. Certifications (at least two required): CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk certification, or equivalent.Job Type: Full-timeApplication Question(s):<ul><li>Do you have prior experience working in a Security Operations Center (SOC)?</li><li>How many years of professional experience do you have in cybersecurity or SOC monitoring roles?</li><li>Do you hold at least two relevant cybersecurity certifications (e.g., CEH, GIAC, CySA+, ECIH, Microsoft Sentinel SIEM, Splunk, etc.)? please mention.</li><li>Are you comfortable working in 24x7 shift rotations, including nights, weekends, and holidays?</li><li>How would you rate your knowledge of networking fundamentals (TCP/IP, DNS, HTTP, ports, subnets, firewall logic)?</li></ul>&#9744; Beginner&#9744; Intermediate&#9744; Advanced<ul><li>How would you rate your hands-on skills with Windows (Event Viewer, PowerShell) and Linux (CLI, logs, permissions, services)?</li><li>Do you have experience analyzing logs from firewalls, proxies, and endpoints?</li><li>What is your current and expected monthly salary (QAR)? Notice period?</li></ul>

L1 SOC Analyst (Level 1)

Search 2148+ Soc analyst jobs near you this September. New roles added regularly across leading industries. Apply today.

2148 soc analyst jobs NEAR_ME

SOC Analyst

SOC Analyst

L3 SOC Analyst

SOC Analyst- L2

SOC Analyst

L1 SOC Analyst (Level-1)

L1 SOC Analyst (Level 1)