SOC L2 Analyst: Advanced Threat Hunter & Incident Lead

CyberGate Defense LLC; Abu Dhabi; On-site; AED 200,000 - 320,000; Full time

Job summary

Keka Technologies Private Limited is seeking a SOC L2 Analyst in Abu Dhabi to lead complex security investigations, drive incident containment and recovery, and uplift detection capabilities. You will act as the escalation point for Tier 1 analysts and mentor junior staff.

You will work with Splunk and IBM QRadar, develop playbooks, and integrate threat intel to protect the environment against evolving threats. A strong MITRE ATT&CK background and scripting skills are essential.

Qualifications

• 4–6 years of dedicated SOC/cyber security operations experience.
• Bachelor's degree in Computer Science, Cyber Security or related field.
• Proficiency with Splunk SPL, dashboards, alerts and IBM QRadar offenses/rules.
• Strong knowledge of the MITRE ATT&CK framework and the incident response lifecycle.
• Experience with threat intelligence integration and automation scripting.

Responsibilities

• Perform advanced threat analysis and investigate complex security incidents escalated from Tier 1.
• Lead incident response activities including containment of active threats, eradication of malicious actors, and recovery of systems.
• Conduct comprehensive root cause analyses to identify breach vectors and recommend preventive controls.
• Proactively hunt for threats using IOCs and TTPs to uncover hidden activity.
• Develop and optimize SIEM use cases, correlation rules, and alerts to reduce false positives.
• Create and refine incident response playbooks and automated detection logic.
• Mentor L1 analysts on investigation techniques and professional development.

Skills

Threat analysis

Incident response

Incident leadership

Mentorship

Scripting (Python/PowerShell/Bash)

Education

Bachelor’s degree in Computer Science, Cyber Security, or related field

Tools

Splunk

IBM QRadar

EDR/XDR

IDS/IPS

Job description

Keka Technologies Private Limited is seeking a SOC L2 Analyst in Abu Dhabi to lead complex security investigations, drive incident containment and recovery, and uplift detection capabilities. You will act as the escalation point for Tier 1 analysts and mentor junior staff.

You will work with Splunk and IBM QRadar, develop playbooks, and integrate threat intel to protect the environment against evolving threats. A strong MITRE ATT&CK background and scripting skills are essential.