SOC Analyst (L2)

KalSoft; Muscat; On-site; OMR 12,000 - 24,000; Full time

Job summary

KalSoft is seeking an experienced SOC Analyst (L2) in Oman to support security operations, real-time monitoring, and incident escalation. The role requires 5+ years of SOC experience and strong analytical skills, with CEH or Fortinet NSE certification preferred.

You will work with L1 SOC and engineering teams, investigate critical incidents, and help refine detections and response playbooks. This full-time position follows business hours with on-site duties.

Qualifications

• Omani national only.
• Minimum 5+ years of SOC experience.
• Hands-on experience in SOC monitoring, alert triage, incident investigation, and escalation.
• Strong understanding of security incidents, detection rules, use cases, and incident response processes.

Responsibilities

• Monitor security events in real time and perform alert triage and in-depth investigation during business hours.
• Support the L1 SOC team with analysis, investigation, and recommendations.
• Perform second-level review of security alerts to ensure potential incidents are not overlooked.
• Handle incident escalations and coordinate response activities according to SLAs.
• Conduct detailed investigations of critical and recurring security incidents.
• Identify incident trends and recommend detection-rule tuning and improvements.
• Contribute to development of SOC use cases, playbooks, and incident-handling procedures.
• Track and monitor incident SLAs daily and ensure timely closure or escalation.
• Review daily incident summary reports for quality assurance.
• Prepare weekly and monthly reports covering incident statistics and SOC performance.
• Coordinate with engineering teams and vendors for issue resolution.
• Escalate critical security issues and SLA breaches to management.

Skills

SOC monitoring, alert triage, incident

L2 support and escalation

Analytical investigation

Documentation and reporting

Tools

SIEM

Firewall/IDS

Job description

Location: Oman
Nationality: Omani Nationals Only
Experience: 5+ Years
Employment Type: Full-Time
Working Hours: 8×5 (Business Hours)

About the Role

KalSoft is looking for an experienced SOC Analyst (L2) to support Security Operations Center activities, including real-time monitoring, alert investigation, incident escalation, and security incident response. The role will provide second-level analysis, support the L1 SOC team, investigate critical and recurring incidents, and contribute to improving SOC detection, response, and incident-handling processes.

Key Responsibilities

• Monitor security events in real time and perform alert triage and in-depth investigation during business hours.
• Support the L1 SOC team with analysis, investigation, and recommendations.
• Perform second-level review of security alerts to ensure potential incidents are not overlooked.
• Handle incident escalations and coordinate response activities according to agreed SLAs.
• Conduct detailed investigations of critical and recurring security incidents.
• Identify incident trends and recommend detection-rule tuning and improvements.
• Contribute to the development and refinement of SOC use cases, playbooks, and incident-handling procedures.
• Track and monitor incident SLAs daily and ensure timely closure or escalation.
• Review daily incident summary reports for quality assurance.
• Prepare weekly and monthly reports covering incident statistics, SOC performance, and improvement recommendations.
• Coordinate with engineering teams and vendors for issue resolution and system integration.
• Escalate critical security issues and SLA breaches to management when required.

Key Deliverables

• Daily security monitoring and escalation reports.
• Coordination withengineering team.
• Weekly summaries of detection performance and improvement recommendations.

Requirements

• Omani National only.
• Minimum 5+ years of SOC experience.
• Hands-on experience in SOC monitoring, alert triage, incident investigation, and escalation.
• Strong understanding of security incidents, detection rules, use cases, and incident response processes.
• Experience working with SOC teams, engineering teams, and security technology vendors.
• Strong analytical and investigation skills.
• Good understanding of SLA-based incident management and reporting.
• CEH and/or Fortinet NSE certification is required/preferred.
• Good communication and documentation skills.