Position Summary
Driving frontline cybersecurity monitoring and rapid incident triage across enterprise environments, HyperThink Systems is actively seeking an accomplished SOC L1 Analyst for a 12-month extendable contract engagement in Qatar. In this vital security operations role, you will monitor security events, analyze raw logs, perform event correlation, and execute initial incident triage. Bringing 3 to 5 years of progressive professional experience in security operations and Splunk SIEM administration, you will empower enterprise clients to maintain uncompromised threat visibility and rapid response capabilities. This prestigious career opportunity offers competitive remuneration, shift-based flexibility, and exceptional professional growth within a premier technology solutions enterprise.
Detailed Job Description
As a SOC L1 Analyst supporting HyperThink Systems in Qatar, you will take full operational ownership of frontline security monitoring, log analysis, event correlation, and initial alert triage. Your day-to-day responsibilities include reviewing security alerts in Splunk SIEM, executing preliminary incident investigation, correlating network and endpoint logs, and escalating critical security anomalies to tier-2 engineering squads. You will collaborate closely with cross-functional security operations, IT infrastructure, and compliance squads in shift-based operational environments while adhering to strict service level agreements. Furthermore, you will manage application requirements by submitting your updated CV via direct email to Sai Dasari at saikumar@hyperthinksys.com, including your current location, notice period, current CTC, expected CTC, and nationality.
Key Responsibilities
- Monitor enterprise security access logs, network traffic, and system events utilizing Splunk SIEM platforms in shift-based rotations.
- Perform rigorous log analysis, event correlation, and initial triage of security alerts and potential threat indicators.
- Conduct preliminary incident investigation and documentation, gathering relevant artifacts and telemetry data.
- Escalate verified security incidents promptly to Tier-2 and Tier-3 SOC engineering squads according to established runbooks.
- Assist in tuning SIEM use cases, filtering false positives, and maintaining dashboard alerting hygiene.
- Apply foundational knowledge of the MITRE ATT&CK framework and threat intelligence feeds during log review.
- Participate in shift handover meetings, documenting open security tickets and ongoing operational investigations.
- Maintain comprehensive incident logs, event summaries, and operational compliance reports.
Required Qualifications & Skills
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
- Minimum of 3 to 5 years of progressive professional experience in cybersecurity operations, SOC monitoring, or IT support.
- Strong, demonstrable hands‑on professional expertise with Splunk SIEM administration, log analysis, and query building (SPL).
- Comprehensive working knowledge and practical proficiency in security monitoring, event correlation, and threat detection.
- Deep practical experience performing initial incident investigation, artifact collection, and ticket documentation.
- Solid practical grasp of network protocols, operating system security baselines, and common attack vectors.
- Proven ability to operate effectively within 24/7 shift‑based rotational schedules in fast‑paced SOC environments.
- Mandatory legal work eligibility and physical availability for professional operations in Qatar.
Nice‑to‑Have Skills
- Professional security certifications such as CompTIA Security+, CEH, or Cisco CyberOps Associate.
- Prior professional working experience in top‑tier managed security service providers (MSSP) or enterprise security operations centers.
- Hands‑on familiarity with security orchestration, automation, and response (SOAR) platforms.
- Experience utilizing Python or PowerShell for automating alert triage and log collection workflows.
- Exposure to agile IT service management frameworks and enterprise ticketing platforms (ServiceNow, Jira).
Application Information
- Recruiter: HyperThink Systems Recruitment Division
- Contact Name: Sai Dasari (Cloud, DevOps & AI Talent Specialist)
- Email: saikumar@hyperthinksys.com
- Phone:
- Company Website: https://www.hyperthinksys.com
- Salary/Rate: Market Competitive / Enterprise Qatar Security Package
- Deadline: Open until filled (Urgent Qatar SOC L1 Opening)
- Notice Period: Immediate to 30 Days Preferred
- Contract Duration: 12 Months Contract (Extendable, Shift-Based)