SOC Anallyst L1

Keka Inc.; Dubai; On-site; AED 89,000 - 134,000; Full time

Job summary

Keka Inc. is seeking a Level 1 SOC Analyst to join our Dubai-based SOC. The role focuses on monitoring security events, conducting initial investigations, and triaging incidents within a fast-paced MSS environment.

You will work with leading SIEM platforms and collaborate with cross-functional teams to maintain security posture and client satisfaction. Rotational shifts and 24x7 coverage are required.

Qualifications

• 2–4 years of experience in Security Operations Centers (SOC).
• Hands-on SIEM monitoring, alert analysis and incident handling.
• Familiarity with MSS operations and client support in 24x7 environments.

Responsibilities

• Monitor security alerts and events in SIEM tools.
• Analyze and investigate suspicious activities and incidents.
• Perform initial incident triage and classification.
• Escalate critical incidents to L2/L3 teams.
• Create and manage incident tickets.
• Follow SOC playbooks and SOPs.
• Generate daily/weekly security reports.
• Support MSS clients in a 24x7 SOC environment.
• Maintain SLA compliance.

Skills

SOC operations

Security monitoring

Incident triage

Log analysis

Networking basics

Threat understanding

Ticketing tools

Tools

Splunk Enterprise

IBM QRadar

ServiceNow

JIRA

Remedy

Windows logs

Linux logs

IDS/IPS

Firewall alerts

Endpoint security

Job description

Security Operations Center (SOC) Analyst – Level 1

Experience:2 to 4 years in SOC

Key Skills:

• SIEM Monitoring using:
  • Splunk Enterprise
  • IBM QRadar
• MSS (Managed Security Services) operations
• Security event monitoring and alert analysis
• Incident triage and escalation
• Log analysis and correlation
• Basic networking knowledge (TCP/IP, DNS, HTTP, VPN)
• Understanding of cyber threats and attack techniques
• Ticketing tools (ServiceNow/JIRA/Remedy)
• Basic knowledge of:
  • Windows/Linux logs
  • Firewall alerts
  • IDS/IPS
  • Endpoint security

Responsibilities:

• Monitor security alerts and events in SIEM tools
• Analyze and investigate suspicious activities
• Perform initial incident triage and classification
• Escalate critical incidents to L2/L3 teams
• Create and manage incident tickets
• Follow SOC playbooks and SOPs
• Generate daily/weekly security reports
• Support MSS clients in 24x7 SOC environment
• Maintain SLA compliance

Preferred Certifications:

• CompTIA Security+
• CEH
• SC-200 (Microsoft Security Operations Analyst)

Shift Requirement:

• Rotational shifts / 24x7 SOC environment