SOC Analyst: Threat Hunter & Incident Response Pro

Khanewal; Islamabad; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Mobilink Microfinance Bank Limited (MMBL) seeks a SOC Analyst to monitor, detect, investigate and respond to cybersecurity incidents. The role emphasizes advanced security monitoring, threat hunting, incident investigation, and improving SOC detection and response capabilities.

You will use IBM QRadar (or equivalent SIEM), work with Windows and Linux environments, and collaborate with IT, Network, and Application teams to contain and remediate threats in Pakistan.

Qualifications

• Strong knowledge of SOC operations and incident response.
• Understanding of AI models and Agentic AI SOC concepts is preferred.
• Hands-on experience with IBM QRadar or equivalent SIEM.
• Good understanding of Windows, Linux, networking, Active Directory, and authentication.
• Knowledge of MITRE ATT&CK, threat hunting, and IOC analysis.
• Experience with XDR/EDR, DLP, DAM, PAM, WAF, and IDS/IPS is preferred.
• Scripting knowledge in PowerShell, Python, or Bash is an advantage.
• 1–3 years of experience in SOC/cybersecurity, preferably within the banking or financial sector.

Responsibilities

• Monitor and investigate security alerts using SIEM, XDR/EDR, DLP, DAM, PAM, WAF, IDS/IPS, and firewall technologies.
• Perform advanced log analysis, event correlation, IOC investigation, and root-cause analysis.
• Investigate and respond to incidents such as malware, phishing, account compromise, privilege abuse, lateral movement, and data exfiltration.
• Conduct proactive threat hunting using SIEM, EDR/XDR, and threat intelligence.
• Develop and optimize correlation rules, use cases, queries, and security dashboards.
• Identify monitoring gaps and support onboarding of new log sources.
• Analyze threat intelligence and convert relevant threats into actionable detection use cases.
• Maintain incident records, investigation timelines, and detailed reports.
• Coordinate with IT, Network, Infrastructure, and Application teams for containment and remediation.
• Maintain SOC runbooks, playbooks, and monitoring procedures.

Skills

SIEM

Threat hunting

Incident response

QRadar

Windows

Linux

Scripting

Tools

IBM QRadar

Job description

Mobilink Microfinance Bank Limited (MMBL) seeks a SOC Analyst to monitor, detect, investigate and respond to cybersecurity incidents. The role emphasizes advanced security monitoring, threat hunting, incident investigation, and improving SOC detection and response capabilities.

You will use IBM QRadar (or equivalent SIEM), work with Windows and Linux environments, and collaborate with IT, Network, and Application teams to contain and remediate threats in Pakistan.