SOC Analyst (Tier 2)

RedFortress Technologies; Pakistan; Hybrid; PKR 800,000 - 1,200,000; Full time

Job summary

RedFortress Technologies is seeking a skilled SOC analyst to triage, investigate, and escalate alerts across client environments. You will lead containment efforts during incidents, and craft detection rules aligned with MITRE ATT&CK.

The role emphasizes maintaining runbooks, cross-shift handovers, and delivering precise, contextual client reports. Strong technical communication is essential.

Qualifications

• Two or more years in a SOC or incident response function.
• Practical experience with at least one SIEM and one EDR platform.
• Solid grasp of Windows and Linux internals and authentication flows.

Responsibilities

• Triage, investigate and escalate alerts across client environments.
• Lead containment steps during confirmed incidents.
• Author and tune detection rules mapped to MITRE ATT&CK.
• Maintain runbooks and handover notes across shifts.
• Support client reporting with accurate, contextual analysis.

Skills

SOC experience

Incident Response

SIEM

EDR

Windows internals

Linux internals

Stakeholder comms

Tools

SIEM tools

EDR platform

Job description

Triage, investigate and escalate alerts across client environments, and improve the detections behind them.

Responsibilities

• Investigate escalated alerts across endpoint, identity and network telemetry
• Lead containment steps during confirmed incidents
• Author and tune detection rules mapped to MITRE ATT&CK
• Maintain runbooks and handover notes across shifts
• Support client reporting with accurate, contextual analysis

Requirements

• — Two or more years in a SOC or incident response function
• — Practical experience with at least one SIEM and one EDR platform
• — Solid grasp of Windows and Linux internals and authentication flows
• — Ability to explain a technical incident to a non-technical stakeholder