Remote SOC Analyst II: Threat Detection & IR

Arancia; Pakistan; Remote; PKR 2,000,000 - 3,200,000; Full time

Job summary

Arancia is seeking a skilled SOC Analyst – Level 2 to join its Security Operations team. The role focuses on advanced triage, investigation, containment actions, and threat hunting across endpoints, identities, and cloud environments.

You will work with L1, Detection Engineering, Incident Response, and Threat Intelligence teams, transitioning to L3 as you grow, with a 24/7 remote shift and rotating blocks to cover global client needs.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field or equivalent practical experience.
• 2–5 years in a SOC/Incident Response role with end-to-end handling of real security incidents.
• Strong understanding of endpoint, network, identity and cloud security and practical use of MITRE ATT&CK.
• Proficiency in KQL; SPL/OpenSearch DQL knowledge is a plus; basic scripting in Python or PowerShell for automation.
• Certifications such as BTL1, CySA+, GCIH, Microsoft SC-200 or CompTIA Security+ are a plus.

Responsibilities

• Perform advanced triage of alerts escalated from L1, determining true vs false positives and investigating across endpoints, identity, network and cloud telemetry.
• Coordinate containment actions (EDR, Entra ID/IAM, blocking indicators) and document actions with timelines and evidence.
• Conduct hypothesis-driven threat hunting across endpoint, identity, and cloud data; translate hunts into new detections or tuning.
• Provide feedback to Detection Engineering on false positives and tuning opportunities; validate new rules before production.
• Produce clear incident reports for technical and non-technical stakeholders and support SLA metrics.
• Mentor L1 analysts and contribute to knowledge bases and lessons learned.

Skills

SOC operations

Threat investigation

Incident response

MITRE ATT&CK

KQL

OpenSearch DQL

Python

PowerShell

Scripting

Team mentoring

Communication

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Microsoft Sentinel

Elastic SIEM

OpenSearch

Defender for Endpoint

CrowdStrike

SentinelOne

Entra ID

Office 365

Job description

Arancia is seeking a skilled SOC Analyst – Level 2 to join its Security Operations team. The role focuses on advanced triage, investigation, containment actions, and threat hunting across endpoints, identities, and cloud environments.

You will work with L1, Detection Engineering, Incident Response, and Threat Intelligence teams, transitioning to L3 as you grow, with a 24/7 remote shift and rotating blocks to cover global client needs.