IT SOC Analyst — Threat Hunting & Incident Response

PARCO - Pak-Arab Refinery Limited; Karachi Division; On-site; PKR 3,000,000 - 4,000,000; Full time

Job summary

Pak-Arab Refinery Limited (PARCO) is seeking an IT SOC Analyst on a contractual basis to manage cybersecurity incidents end-to-end and strengthen threat detection and response capabilities at corporate Karachi headquarters.

The role involves proactive threat hunting, incident investigations, playbook development, tabletop exercises, and cross-functional coordination with technical and business teams.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, or a related field.
• Strong analytical, investigative, and problem-solving capabilities.
• Ability to work effectively in high-pressure situations and manage cybersecurity incidents in a structured manner.
• Strong coordination and collaboration capabilities across technical, risk, and business functions.
• Ability to clearly document and communicate technical findings, incident impact, root causes, and recommended actions.
• Strong report-writing, presentation, and stakeholder-management skills.
• Relevant certifications such as ECIH, CHFI, CySA+, or equivalent will be preferred.

Responsibilities

• Monitor, investigate, and respond to cybersecurity incidents from detection through containment and recovery.
• Conduct proactive threat hunting across endpoints, networks, identities, cloud environments, and logs.
• Analyze security alerts, IOCs, and attacker TTPs.
• Develop, tune, and improve SIEM and EDR/XDR detection rules and use cases.
• Investigate security events, determine scope and impact, perform root-cause analysis.
• Prepare comprehensive incident reports with timeline, findings, and lessons learned.
• Develop and test incident response playbooks and escalation mechanisms.
• Coordinate tabletop exercises to test incident response readiness.
• Use MITRE ATT&CK to enhance threat-hunting and defensive capabilities.

Skills

Analytical thinking

Incident response

Threat hunting

Stakeholder management

Report writing

Education

Bachelor's degree in Information Security/CS/IT

Tools

Splunk

IBM QRadar

EDR/XDR (Trend Micro/ Defender/CrowdStrike)

KQL/SPL

Job description

Pak-Arab Refinery Limited (PARCO) is seeking an IT SOC Analyst on a contractual basis to manage cybersecurity incidents end-to-end and strengthen threat detection and response capabilities at corporate Karachi headquarters.

The role involves proactive threat hunting, incident investigations, playbook development, tabletop exercises, and cross-functional coordination with technical and business teams.