SOC L1, L2, L3 Analyst | Hyperthink Systems | Qatar

Hyperthink Systems; Qatar; On-site; QAR 90,000 - 130,000; Full time

Job summary

Hyperthink Systems is actively seeking experienced SOC Analysts (L1-L3) for a 12-month extendable contract in Qatar. You will monitor security events, analyze logs, and lead incident response across enterprise environments using Splunk SIEM and MITRE ATT&CK mappings.

You will perform rapid threat detection, incident escalation, and lead SOC operations with cross-functional IT teams, ensuring security posture and incident remediation are executed to meet SLAs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 3 to 8+ years of progressive professional experience in Security Operations Center (SOC) environments and incident response.
• Strong, demonstrable hands-on professional expertise in Splunk SIEM administration, log analysis, and event correlation.
• Comprehensive working knowledge and practical proficiency in threat detection, incident investigation, and rapid response workflows.
• Deep practical experience designing SIEM use cases, alert tuning, and security dashboard management.
• Solid practical experience applying the MITRE ATT&CK framework and threat intelligence in production environments.
• Exceptional analytical, troubleshooting, debugging, and problem-solving capabilities under high-pressure conditions.
• Excellent written and verbal English communication skills with strong incident escalation and technical leadership abilities.
• Mandatory legal work eligibility and physical availability for full-time professional operations in Qatar (12-month extendable contract).

Responsibilities

• Monitor real-time security events, analyze logs, and execute event correlation utilizing Splunk SIEM platforms.
• Detect, investigate, triage, and respond to security incidents, malware outbreaks, and unauthorized access attempts.
• Design, configure, and tune SIEM use cases, detection rules, alerts, and operational dashboards.
• Integrate threat intelligence feeds and leverage the MITRE ATT&CK framework to identify advanced adversary tactics and techniques.
• Provide L3 and technical lead oversight for complex incident escalation, crisis management, and SOC operations.
• Lead cross-functional collaboration with IT infrastructure, network security, and application support squads.
• Conduct thorough root cause analysis (RCA) and forensic investigations following major security incidents.
• Maintain accurate, comprehensive technical documentation of security incident reports, response playbooks, and operational runbooks.

Skills

Splunk SIEM administration

Log analysis

Event correlation

Incident response

MITRE ATT&CK framework

SOC experience

English communication

Escalation leadership

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Tools

Splunk SIEM

Job description

Position Summary:

Hyperthink Systems is actively seeking experienced, high-caliber, and technical SOC L1, L2, and L3 Analysts with progressive professional experience in cybersecurity operations, threat detection, incident investigation, and Splunk SIEM administration to join our client project on a contract basis (12 months, extendable) in Qatar. In this critical security operations and incident response role, you will be responsible for monitoring security events, performing log analysis and event correlation, investigating complex cyber threats, and leading incident escalation workflows. You will leverage your deep specialist expertise in Splunk SIEM, MITRE ATT&CK frameworks, alert tuning, and SOC team leadership to deliver uncompromised system security, rapid threat remediation, and operational excellence. This opportunity offers competitive compensation, executive technical visibility, and exceptional career growth prospects within a premier global IT staffing and cybersecurity consultancy enterprise.

Detailed Job Description:

As a SOC L1, L2, L3 Analyst supporting Hyperthink Systems in Qatar, you will take full operational, tactical, and technical ownership of security monitoring, log analysis, threat intelligence integration, and incident response operations across mission-critical enterprise environments. Your day-to-day responsibilities include monitoring security events and logs utilizing Splunk SIEM, executing event correlation, alert tuning, and dashboard management, investigating security alerts, executing rapid threat detection and incident response workflows, implementing and refining SIEM use cases to detect advanced persistent threats, applying deep knowledge of the MITRE ATT&CK framework and threat intelligence feeds, managing L3/Lead responsibilities including incident escalation, complex cyber incident investigation, and SOC team leadership, collaborating closely with cross-functional IT infrastructure, DevOps, and executive stakeholder squads in Agile sprint cycles, conducting rigorous security posture audits and root cause analysis (RCA), preparing comprehensive technical documentation of security incident reports, playbooks, and operational runbooks, and managing application requirements by sending your updated resume via direct email to Sai Kumar at [e-mail]. You will utilize your proactive troubleshooting and analytical problem-solving skills to resolve complex security threats and SIEM performance bottlenecks under strict service level agreements. Furthermore, you will manage application requirements ensuring strict compliance with the Qatar on-site presence and 12-month extendable contract duration.

Key Responsibilities:

• Monitor real-time security events, analyze logs, and execute event correlation utilizing Splunk SIEM platforms.
• Detect, investigate, triage, and respond to security incidents, malware outbreaks, and unauthorized access attempts.
• Design, configure, and tune SIEM use cases, detection rules, alerts, and operational dashboards.
• Integrate threat intelligence feeds and leverage the MITRE ATT&CK framework to identify advanced adversary tactics and techniques.
• Provide L3 and technical lead oversight for complex incident escalation, crisis management, and SOC operations.
• Lead cross-functional collaboration with IT infrastructure, network security, and application support squads.
• Conduct thorough root cause analysis (RCA) and forensic investigations following major security incidents.
• Maintain accurate, comprehensive technical documentation of security incident reports, response playbooks, and operational runbooks.

Required Qualifications & Skills:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 3 to 8+ years of progressive professional experience in Security Operations Center (SOC) environments and incident response.
• Strong, demonstrable hands-on professional expertise in Splunk SIEM administration, log analysis, and event correlation.
• Comprehensive working knowledge and practical proficiency in threat detection, incident investigation, and rapid response workflows.
• Deep practical experience designing SIEM use cases, alert tuning, and security dashboard management.
• Solid practical experience applying the MITRE ATT&CK framework and threat intelligence in production environments.
• Exceptional analytical, troubleshooting, debugging, and problem-solving capabilities under high-pressure conditions.
• Excellent written and verbal English communication skills with strong incident escalation and technical leadership abilities.
• Mandatory legal work eligibility and physical availability for full-time professional operations in Qatar (12-month extendable contract).

Nice-to-Have Skills:

• Professional cybersecurity certifications such as CISSP, CEH, CompTIA Security+, SANS GIAC (GCIH, GCFA), or Splunk Certified Enterprise Security Administrator.
• Prior professional working experience in top-tier managed security service providers (MSSPs), financial institutions, or enterprise SOCs.
• Hands-on familiarity with cloud security posture management (CSPM) and container security tools.
• Experience integrating threat intelligence platforms (TIP) and SOAR (Security Orchestration, Automation, and Response) tools.
• Exposure to agile IT service management frameworks and enterprise ticketing platforms (ServiceNow, Jira).

Application Information:

• Recruiter: Hyperthink Systems Recruitment Division
• Contact Name: Sai Kumar
• Email: [e-mail]
• Phone:
• Company Website: https://www.hyperthinksys.com
• Salary/Rate: Market Competitive / Enterprise Cybersecurity Contract Package
• Deadline: Open until filled (Urgent Qatar SOC Analyst Opening)
• Notice Period: Immediate to 30 Days Preferred
• Contract Duration: 12 Months Extendable Contract Engagement (Qatar)
• Application Instructions: Interested candidates meeting the Splunk SIEM and SOC operations requirements must submit their updated resume via direct email to Sai Kumar at [e-mail].

Recruitment Pro Tip:

When applying for this SOC L1, L2, L3 Analyst position through Hyperthink Systems, ensure your resume explicitly highlights your Splunk SIEM and incident investigation portfolio, details your experience with the MITRE ATT&CK framework, and confirms your availability for the 12-month extendable contract in Qatar.