SOC Analyst

Mobilink Microfinance Bank Limited; Islamabad; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Mobilink Microfinance Bank Limited in Islamabad seeks a SOC Analyst to monitor, detect, investigate, and respond to security incidents across the bank, ensuring timely resolution of escalated alerts through advanced security monitoring and incident response.

You will work with SIEM, XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS, and firewalls, perform log analysis, hunting, and develop detection use cases, while coordinating with IT and infra teams to contain and remediate threats.

Qualifications

• Strong knowledge of SOC operations and incident response.
• Understanding of AI models and Agentic AI SOC concepts is preferred.
• Hands-on experience with IBM QRadar or equivalent SIEM.
• Good understanding of Windows, Linux, networking, Active Directory and authentication.
• Knowledge of MITRE ATT&CK, threat hunting and IOC analysis.
• Scripting knowledge in PowerShell, Python or Bash is an advantage.
• 1-3 years of SOC/cybersecurity experience, preferably in the banking/financial sector.

Responsibilities

• Monitor and investigate security alerts using SIEM, XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS and firewall technologies.
• Perform advanced log analysis, event correlation, IOC investigation, and root-cause analysis.
• Investigate and respond to security incidents including malware, phishing, account compromise, privilege abuse, lateral movement, and data exfiltration etc.
• Conduct proactive threat hunting using SIEM, EDR/XDR and threat intelligence. Develop, tune and optimize security tools with correlation rules, use cases, queries and dashboards.
• Identify monitoring gaps and support onboarding and validation of new log sources. Analyse threat intelligence and convert relevant threats into actionable detection use cases.
• Maintain incident records, investigation timelines and detailed incident reports. Coordinate with IT, Network, Infrastructure and Application teams for containment, remediation.
• Maintain SOC runbooks, playbooks and monitoring procedures.

Skills

SOC operations

Incident response

Threat hunting

Log analysis

Root-cause analysis

Tools

IBM QRadar

XDR/EDR

DLP

DAM

PAM

WAF

IDS/IPS

Job description

Job Grade: OG-II

Reports to: SOC Manager

Location: Head Office, Islamabad

Job Purpose

To monitor, detect, investigate, and respond to security incidents across the Bank, ensuring timely resolution of escalated alerts through advanced security monitoring, incident investigation, threat hunting, and continuous improvement of SOC detection and response capabilities.

Key Responsibilities

• Monitor and investigate security alerts using SIEM, XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS and firewall technologies.
• Perform advanced log analysis, event correlation, IOC investigation, and root-cause analysis.
• Investigate and respond to security incidents including malware, phishing, account compromise, privilege abuse, lateral movement, and data exfiltration etc.
• Conduct proactive threat hunting using SIEM, EDR/XDR and threat intelligence. Develop, tune and optimize security tools with correlation rules, use cases, queries and dashboards.
• Identify monitoring gaps and support onboarding and validation of new log sources. Analyse threat intelligence and convert relevant threats into actionable detection use cases.
• Maintain incident records, investigation timelines and detailed incident reports. Coordinate with IT, Network, Infrastructure and Application teams for containment, remediation.
• Maintain SOC runbooks, playbooks and monitoring procedures.

Job Requirements

• Strong knowledge of SOC operations and incident response.
• Understanding of AI models and Agentic AI soc concepts is preferred.
• Hands-on experience with IBM QRadar or equivalent SIEM.
• Good understanding of Windows, Linux, networking, Active Directory and authentication.
• Knowledge of MITRE ATT&CK, threat hunting and IOC analysis. Experience with XDR/EDR, DLP, DAM, PAM, WAF and IDS/IPS preferred.
• Scripting knowledge in PowerShell, Python or Bash is an advantage.
• 1-3 years of SOC/cybersecurity experience, preferably in the banking/financial sector.

About Mobilink Bank

Mobilink Bank is providing banking services to over 64.22 million registered users including 21 million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 132 branches and 324,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan instalments), mobile wallets, insurance, G2P, B2B & B2P payments; thus, playing a leading role in the promotion of financial inclusion. Mobilink Bank is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.

Why Join Mobilink Bank?

This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavour.