Senior SOC Analyst (L1-L3) | Splunk & IR Lead

Hyperthink Systems; Qatar; On-site; QAR 90,000 - 130,000; Full time

Job summary

Hyperthink Systems is actively seeking experienced SOC Analysts (L1-L3) for a 12-month extendable contract in Qatar. You will monitor security events, analyze logs, and lead incident response across enterprise environments using Splunk SIEM and MITRE ATT&CK mappings.

You will perform rapid threat detection, incident escalation, and lead SOC operations with cross-functional IT teams, ensuring security posture and incident remediation are executed to meet SLAs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 3 to 8+ years of progressive professional experience in Security Operations Center (SOC) environments and incident response.
• Strong, demonstrable hands-on professional expertise in Splunk SIEM administration, log analysis, and event correlation.
• Comprehensive working knowledge and practical proficiency in threat detection, incident investigation, and rapid response workflows.
• Deep practical experience designing SIEM use cases, alert tuning, and security dashboard management.
• Solid practical experience applying the MITRE ATT&CK framework and threat intelligence in production environments.
• Exceptional analytical, troubleshooting, debugging, and problem-solving capabilities under high-pressure conditions.
• Excellent written and verbal English communication skills with strong incident escalation and technical leadership abilities.
• Mandatory legal work eligibility and physical availability for full-time professional operations in Qatar (12-month extendable contract).

Responsibilities

• Monitor real-time security events, analyze logs, and execute event correlation utilizing Splunk SIEM platforms.
• Detect, investigate, triage, and respond to security incidents, malware outbreaks, and unauthorized access attempts.
• Design, configure, and tune SIEM use cases, detection rules, alerts, and operational dashboards.
• Integrate threat intelligence feeds and leverage the MITRE ATT&CK framework to identify advanced adversary tactics and techniques.
• Provide L3 and technical lead oversight for complex incident escalation, crisis management, and SOC operations.
• Lead cross-functional collaboration with IT infrastructure, network security, and application support squads.
• Conduct thorough root cause analysis (RCA) and forensic investigations following major security incidents.
• Maintain accurate, comprehensive technical documentation of security incident reports, response playbooks, and operational runbooks.

Skills

Splunk SIEM administration

Log analysis

Event correlation

Incident response

MITRE ATT&CK framework

SOC experience

English communication

Escalation leadership

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Tools

Splunk SIEM

Job description

Hyperthink Systems is actively seeking experienced SOC Analysts (L1-L3) for a 12-month extendable contract in Qatar. You will monitor security events, analyze logs, and lead incident response across enterprise environments using Splunk SIEM and MITRE ATT&CK mappings.

You will perform rapid threat detection, incident escalation, and lead SOC operations with cross-functional IT teams, ensuring security posture and incident remediation are executed to meet SLAs.