SOC L2 Incident Responder & Threat Hunter

Raqami Islamic Digital Bank Ltd.; Karachi Division; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Raqami Islamic Digital Bank Ltd. is seeking an Officer SOC L2 to support investigation, containment, and resolution of cybersecurity incidents escalated from SOC L1. You will help detect threats, minimise business impact, and protect information assets in line with SBP, ISO/IEC 27001, and internal policies.

The role requires hands-on incident analysis and coordination with cross-functional teams. The position involves 24x7 SOC coverage, potential shift rotations, and collaboration with IT,

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field.
• Certifications such as CompTIA CySA+ and Security+ preferred.

Responsibilities

• Investigate and analyse security alerts escalated by SOC L1 to identify genuine threats and incidents.
• Conduct in-depth investigations of cybersecurity incidents including malware, phishing, account compromise, and data exfiltration.
• Correlate security logs across SIEM, EDR/XDR, email security, firewalls, AD, and other platforms to support analysis.
• Assist in containment actions like endpoint isolation and blocking malicious IPs in coordination with teams.
• Collect, preserve, and analyse digital evidence with proper documentation and chain of custody.
• Support root cause analysis of initial access vectors, attacker activities, and IOCs.
• Participate in threat hunting using threat intel, SIEM queries, and MITRE ATT&CK techniques.
• Coordinate with IT and other teams for containment, eradication, recovery, and remediation.
• Escalate critical incidents per procedures; help improve incident response playbooks and detection rules.
• Prepare incident reports with timelines, impact, and recommendations; maintain tickets and evidence.

Skills

QRadar SIEM

EDR/XDR

Incident response

Threat hunting

Digital forensics

Education

Bachelor's degree in CS/InfoSec

CySA+/Security+ preferred

Tools

QRadar

EDR/XDR tools

Job description

Raqami Islamic Digital Bank Ltd. is seeking an Officer SOC L2 to support investigation, containment, and resolution of cybersecurity incidents escalated from SOC L1. You will help detect threats, minimise business impact, and protect information assets in line with SBP, ISO/IEC 27001, and internal policies.

The role requires hands-on incident analysis and coordination with cross-functional teams. The position involves 24x7 SOC coverage, potential shift rotations, and collaboration with IT,