SOC Analyst L2

ALI BIN ALI; Doha; On-site; QAR 201,000 - 335,000; Full time

Job summary

ALI BIN ALI is seeking an experienced Cyber Security Operations Analyst (L2) to join our SOC in Doha, Qatar. The role leads Level 2 investigations, serves as the primary point of contact for clients, and coordinates incident response and support sessions.

The candidate will develop SOPs, fine-tune tools, and create use cases to address evolving threats. Ideal candidates have 5+ years in SOC, strong incident response knowledge, and hands-on SIEM/SOAR experience.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in SOC or similar cybersecurity role.
• Strong knowledge of cybersecurity principles, threat landscapes, and incident response methodologies.
• Proficiency with SIEM tools (QRadar, LogRhythm, Microsoft Sentinel) and threat intelligence platforms.
• Experience with SOAR platform administration and automated security playbooks.

Responsibilities

• Lead Level 2 investigations and ensure timely resolution of security incidents.
• Serve as the POC for all clients and maintain strong relationships.
• Conduct troubleshooting sessions with clients to resolve complex security issues.
• Create, document, and maintain SOPs for security operations.
• Fine-tune security tools and develop use cases for emerging threats.
• Proactively hunt for threats and mitigate risks.
• Disseminate TI advisories to stakeholders.
• Monitor SIEM health and provide actionable insights.
• Prepare monthly/weekly incident reports and recommendations.
• Perform SOC maturity and gap analyses; develop improvement strategies.
• Provide training and mentorship to junior analysts.

Skills

Incident response

Threat hunting

SIEM proficiency

SOAR administration

Analytical thinking

Client communication

Problem solving

Pressure handling

Education

Bachelor’s degree in Cybersecurity or related field

Tools

QRadar

LogRhythm

Microsoft Sentinel

SOAR platforms

Job description

We are seeking a highly skilled and experienced Cyber Security Operations Analyst - L2 to join our dynamic Security Operations Center (SOC) team. The ideal candidate will be responsible for leading Level 2 (L2) investigations, serving as the point of contact (POC) for all clients, and conducting incident response and support sessions. This role requires a deep understanding of cybersecurity principles, excellent problem-solving skills, and the ability to work collaboratively with clients and team members.

Key Responsibilities

• L2 Investigations: Lead and manage Level 2 investigations to identify, analyze, and respond to security incidents. Ensure timely and effective resolution of incidents while maintaining detailed documentation.
• Point of Contact (POC) for Clients: Act as the primary point of contact for all clients, addressing their cybersecurity concerns and providing expert guidance. Build and maintain strong client relationships to ensure satisfaction and trust.
• Troubleshooting Sessions: Conduct troubleshooting sessions with clients to resolve complex security issues. Collaborate with clients to understand their needs and provide tailored solutions.
• Creation of Standard Operating Procedures (SOPs): Develop, document, and maintain comprehensive SOPs for various security operations and processes. Ensure SOPs are up-to-date and aligned with industry best practices.
• Fine Tuning and Use Case Creation: Continuously fine-tune security tools and technologies to enhance detection and response capabilities. Create and implement use cases to address emerging threats and vulnerabilities.
• Threat Hunting: Proactively hunt for threats within the organization’s network and systems. Utilize advanced threat hunting techniques to identify and mitigate potential security risks.
• Threat Intelligence (TI) Advisories Dissemination: Disseminate threat intelligence advisories to relevant stakeholders. Ensure timely communication of emerging threats and vulnerabilities.
• SIEM Health Analytics: Monitor and analyze the health and performance of Security Information and Event Management (SIEM) systems. Ensure SIEM systems are functioning optimally and provide actionable insights.
• Reporting: Prepare and deliver monthly, weekly, and incident reports to management and clients. Provide detailed analysis and recommendations based on findings.
• SOC Maturity and Gap Analysis: Conduct maturity and gap analysis of the SOC to identify areas for improvement. Develop and implement strategies to enhance SOC capabilities and effectiveness.
• Training and Mentorship: Provide training and mentorship to new joiners and junior analysts. Aid in investigations and ensure they are equipped with the necessary skills and knowledge.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in SOC or similar cybersecurity role.
• Strong knowledge of cybersecurity principles, threat landscapes, and incident response methodologies.
• Proficiency in using SIEM tools including Qradar, Log rhythm & Microsoft Sentinel, threat intelligence platforms, and other security technologies.
• Experienced in SOAR platform administration and the end-to-end implementation of automated security playbooks.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively under pressure and manage multiple priorities.
• Relevant certifications such as BTL2, CySA+, CEH, SC-200, ECIR, eCTHP or equivalent are preferred.