SOC Analyst Intern: Threat Detection & Incident Response

Pintern; Islamabad; On-site; PKR 1,200,000 - 1,800,000; Full time

Job summary

Mobilink Bank in Islamabad seeks an SOC Analyst to monitor, detect, investigate and respond to security incidents across its networks and applications from head office. You will leverage SIEM/XDR/EDR and other security tools to protect assets and user data.

The role requires hands-on incident response, threat hunting, log analysis and threat intel interpretation to continuously improve detection and response capabilities. Hybrid work arrangements may apply.

Qualifications

• Strong knowledge of SOC operations and incident response.
• Experience with SIEM, EDR/XDR, and network security tools.
• Understanding of threat intelligence, IOC analysis, and MITRE ATT&CK.

Responsibilities

• Monitor and investigate security alerts using SIEM, XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS and firewall technologies.
• Perform advanced log analysis, event correlation, IOC investigation, and root-cause analysis.
• Investigate and respond to security incidents including malware, phishing, account compromise, privilege abuse, lateral movement, and data exfiltration.
• Conduct proactive threat hunting using SIEM, EDR/XDR and threat intelligence; tune tools with use cases and dashboards.
• Identify monitoring gaps and onboard new log sources; translate threats into actionable detection use cases.
• Maintain incident records and reports; coordinate with IT, Network, Infrastructure and App teams for containment.
• Maintain SOC runbooks, playbooks and monitoring procedures.

Skills

SOC operations

Incident response

Threat hunting

SIEM experience

Windows/Linux knowledge

Scripting (PowerShell/Python)

Banking sector experience

Tools

IBM QRadar

Job description

Mobilink Bank in Islamabad seeks an SOC Analyst to monitor, detect, investigate and respond to security incidents across its networks and applications from head office. You will leverage SIEM/XDR/EDR and other security tools to protect assets and user data.

The role requires hands-on incident response, threat hunting, log analysis and threat intel interpretation to continuously improve detection and response capabilities. Hybrid work arrangements may apply.