Senior SOC Analyst L2: Threat Hunting & Incident Response

SecurityHQ Ltd.; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

SecurityHQ Ltd. is seeking a SOC Analyst Level 2 to join our 24/7 Security Operations Centre in Dubai.

You will lead investigations, coordinate containment and remediation, and mentor SOC Level 1 Analysts across SIEM, EDR, network and endpoint security. Working with global teams, you will develop detection rules, playbooks, and proactive threat-hunting initiatives while maintaining strong incident reporting and customer communications.

Qualifications

• Experience in a SOC, MSSP, or cybersecurity operations environment.
• Strong experience investigating and responding to security incidents across SIEM and EDR platforms.
• Solid understanding of MITRE ATT&CK and Cyber Kill Chain frameworks.
• Experience analyzing malware, phishing, lateral movement, privilege escalation, and other advanced threats.
• Strong networking knowledge and traffic analysis skills.
• Ability to perform advanced log analysis and correlate events across multiple security tools.
• Certifications such as GCIH, GCIA, CEH, SC-200, or SIEM-specific certs are a plus.

Responsibilities

• Perform in-depth investigation of security incidents escalated from SOC Level 1 Analysts.
• Analyze complex events across SIEM, EDR, network, endpoint, and cloud security technologies.
• Identify attack vectors, determine root cause, and assess scope and impact of incidents.
• Investigate malware, phishing, suspicious activity, and advanced threat campaigns.
• Lead containment, mitigation, and remediation activities with internal and customer teams.
• Develop and enhance detection rules, use cases, SOC playbooks, and monitoring capabilities.
• Participate in proactive threat hunting and continuous security improvement initiatives.
• Provide technical guidance and mentoring to SOC Level 1 Analysts.
• Produce detailed incident reports, root cause analyses, and customer-facing communications.
• Support compliance, audit, and post-incident review activities.
• Assist with administration and optimization of SIEM and EDR platforms.

Skills

SOC Analyst

Incident response

Threat hunting

Mentoring

Log analysis

Communication

Decision making

Tools

Microsoft Sentinel

QRadar

Splunk

Azure

AWS

GCP

Job description

SecurityHQ Ltd. is seeking a SOC Analyst Level 2 to join our 24/7 Security Operations Centre in Dubai.

You will lead investigations, coordinate containment and remediation, and mentor SOC Level 1 Analysts across SIEM, EDR, network and endpoint security. Working with global teams, you will develop detection rules, playbooks, and proactive threat-hunting initiatives while maintaining strong incident reporting and customer communications.