SOC L2

Alykas; Karachi Division; On-site; PKR 1,200,000 - 2,400,000; Full time

Job summary

Alykas is seeking a dedicated SOC Analyst L2 to protect client environments across multiple US-based accounts. You will monitor advanced security events, perform triage, and coordinate rapid incident response while leveraging SIEM, EDR, XDR, and email security tooling.

This role emphasizes collaboration with internal teams and clients, and includes developing automation-friendly playbooks to reduce manual workload. Strong English communication is essential.

Qualifications

• 2–5 years of SOC experience.
• Hands-on IR experience.
• Fluent English (written & verbal) for international clients.

Responsibilities

• Monitor security alerts and investigate IOCs with documented findings.
• Perform initial triage, assess incident severity, and initiate responses.
• Respond to incidents using playbooks and escalation procedures.
• Collaborate with cross-functional teams to resolve incidents efficiently.
• Maintain thorough documentation of investigations and remediation actions.
• Proactively hunt threats to uncover hidden or emerging risks.

Skills

SOC tools

Incident Response

English communication

Education

Security+ / CySA+ / GCIH / GSEC

Tools

SIEM

EDR

XDR

Email Security

Job description

As a SOC Analyst L2 at Alykas, you will play a critical role in safeguarding our clients against evolving cyber threats through advanced security monitoring, analysis, and incident response. Working within a multi-tenant Security Operations Center (SOC), you will support multiple US-based clients using a range of cutting-edge cybersecurity technologies.

Your responsibilities will span threat detection, incident response and triage, and proactive threat hunting, as well as utilizing tools such such as SIEM, XDR, EDR, and Email Security solutions to enhance client security postures. Strong communication and collaboration skills are essential, as you will regularly engage with clients and internal teams to ensure swift and effective responses to security challenges.

Key Responsibilities

• Monitor and analyze security alerts, investigate IOCs and document findings comprehensively
• Conduct initial triage, assess incident severity, and take appropriate response actions.
• Respond to incidents following established playbooks and escalation procedures.
• Collaborate with cross-functional teams to resolve security incidents efficiently.
• Maintain accurate documentation of investigations, incidents, and remediation activities.
• Perform proactive threat hunting to detect hidden or emerging threats.
• Develop hypotheses based on threat intelligence and validate them.
• Demonstrate a passion for SOC automation, focusing on reducing manual workload and repetitive tasks.
• Correlate alerts with threat intelligence and frameworks such as MITRE ATT&CK.
• Tune and optimize security tool rules, policies, and detection use cases to improve accuracy.
• Develop and enhance incident response playbooks and automation workflows.
• Stay current with emerging cyber threats, technologies, and defensive strategies.
• Conduct initial triage, assess incident severity, and take appropriate response actions.

Must-Haves

• 2-5 years of experience in a Security Operations Center (SOC)
• Proficiency with SOC tools (SIEM, EDR, XDR, Email Security solutions)
• Hands-on experience with Incident Response (IR)
• Relevant certifications such as Security+, CySA+, BTL1, eCIR, GSEC, GCIH, etc.
• Strong client-facing communication and reporting skills
• Fluent English communication skills (both written and verbal), essential for working with Alykas's international clients.

Nice-to-Haves (Plusses)

• Experience with automation platforms (SOAR) and scripting (e.g., Python)
• Exposure to vulnerability management and SCCM
• Background in Cyber Threat Hunting (CTH) or Cyber Threat Intelligence (CTI)
• Knowledge of IAM and PAM
• Experience with Microsoft 365 and Azure environments
• Hands-on exposure to US-based clients and international cybersecurity operations.
• Opportunity to learn and adapt to advanced US cybersecurity practices, frameworks, and threat landscape.
• Collaboration with experienced cybersecurity professionals and global teams.
• Opportunity to work on SOC automation and improve operational efficiency.
  Company-sponsored certifications and ongoing professional development opportunities
• Unlimited lab access for hands-on learning and technical skill enhancement.