SOC Analyst L2

Alykas; Karachi Division; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Alykas is seeking a SOC Analyst L2 to monitor and safeguard client environments from evolving cyber threats. You will work in a multi-tenant SOC supporting US-based clients, using SIEM, EDR, XDR, and email security tools.

The role involves incident response, threat hunting, and developing automation to reduce manual work. You will collaborate with global teams, maintain thorough investigations, and stay current on threats and defenses.

Qualifications

• 2-5 years of experience in a Security Operations Center (SOC).
• Hands-on with SOC tools (SIEM, EDR, XDR, Email Security).
• Experience in Incident Response (IR).
• Certifications such as Security+, CySA+, GSEC, GCIH.
• Strong client-facing communication and reporting skills.
• Fluent English communication (written and verbal).

Responsibilities

• Monitor and analyze security alerts, investigate IOCs and document findings.
• Conduct initial triage, assess incident severity, and take appropriate response actions.
• Respond to incidents following established playbooks and escalation procedures.
• Collaborate with cross-functional teams to resolve security incidents efficiently.
• Maintain accurate documentation of investigations, incidents, and remediation activities.
• Perform proactive threat hunting to detect hidden or emerging threats.
• Develop hypotheses based on threat intelligence and validate them.
• Demonstrate a passion for SOC automation to reduce manual workload.

Skills

SIEM

EDR

XDR

Email Security

Incident Response

English fluency

Client communication

Education

Security+

CySA+

GSEC

GCIH

BTL1

eCIR

Job description

As a SOC Analyst L2 at Alykas , you will play a critical role in safeguarding our clients against evolving cyber threats through advanced security monitoring, analysis, and incident response. Working within a multi-tenant Security Operations Center (SOC), you will support multiple US-based clients using a range of cutting-edge cybersecurity technologies.

Your responsibilities will span threat detection, incident response and triage, and proactive threat hunting, as well as utilizing tools such as SIEM, XDR, EDR, and Email Security solutions to enhance client security postures. Strong communication and collaboration skills are essential, as you will regularly engage with clients and internal teams to ensure swift and effective responses to security challenges.

Key Responsibilities

• Monitor and analyze security alerts, investigate IOCs and document findings comprehensively
• Conduct initial triage, assess incident severity, and take appropriate response actions.
• Respond to incidents following established playbooks and escalation procedures.
• Collaborate with cross-functional teams to resolve security incidents efficiently.
• Maintain accurate documentation of investigations, incidents, and remediation activities.
• Perform proactive threat hunting to detect hidden or emerging threats.
• Develop hypotheses based on threat intelligence and validate them.
• Demonstrate a passion for SOC automation, focusing on reducing manual workload and repetitive tasks.
• Correlate alerts with threat intelligence and frameworks such as MITRE ATT&CK.
• Tune and optimize security tool rules, policies, and detection use cases to improve accuracy.
• Develop and enhance incident response playbooks and automation workflows.
• Stay current with emerging cyber threats, technologies, and defensive strategies.
• Conduct initial triage, assess incident severity, and take appropriate response actions.

Must-Haves

• 2-5 years of experience in a Security Operations Center (SOC)
• Proficiency with SOC tools (SIEM, EDR, XDR, Email Security solutions)
• Hands-on experience with Incident Response (IR)
• Relevant certifications such as Security+, CySA+, BTL1, eCIR, GSEC, GCIH, etc.
• Strong client-facing communication and reporting skills
• Fluent English communication skills (both written and verbal), essential for working with Alykas's international clients.

Nice-to-Haves (Plusses)

• Experience with automation platforms (SOAR) and scripting (e.g., Python)
• Exposure to vulnerability management and SCCM
• Background in Cyber Threat Hunting (CTH) or Cyber Threat Intelligence (CTI)
• Knowledge of IAM and PAM
• Experience with Microsoft 365 and Azure environments
• Hands-on exposure to US-based clients and international cybersecurity operations.
• Opportunity to learn and adapt to advanced US cybersecurity practices, frameworks, and threat landscape.
• Collaboration with experienced cybersecurity professionals and global teams.
• Opportunity to work on SOC automation and improve operational efficiency.
  Company-sponsored certifications and ongoing professional development opportunities
• Unlimited lab access for hands-on learning and technical skill enhancement.