SOC L2 Analyst | HyperThink Systems | Qatar

Tech Junction Ltd; Qatar; On-site; QAR 180,000 - 300,000; Full time

Job summary

HyperThink Systems in Qatar is seeking a SOC L2 Analyst for a 12-month extendable contract to own advanced security incident investigations, SIEM tuning, and dashboard optimization. You will mentor L1 analysts and work with cross-functional teams across incident response, threat intel, and IT infrastructure on shift-based rotations.

The role requires 5–8 years in cybersecurity operations with strong Splunk experience and a focus on proactive defense and rapid remediation.

Qualifications

• Bachelor’s degree in CS/Cybersecurity/IT or related field.
• 5–8 years of progressive experience in cybersecurity operations, IR or SOC engineering.
• Hands-on Splunk SIEM engineering, log analysis, and advanced query writing.
• Proficiency in security monitoring, threat detection and incident investigation.
• Experience building SIEM use cases, tuning alerts, and dashboards.
• Experience applying MITRE ATT&CK and threat intelligence.
• Ability to lead and mentor junior analysts in shift-based ops.
• Willingness to work in Qatar and meet legal eligibility.

Responsibilities

• Conduct advanced security incident investigations and rapid remediation.
• Design, test, and implement Splunk SIEM use cases and dashboards.
• Analyze threat intel feeds and map MITRE ATT&CK tactics to controls.
• Provide escalation support to Tier-1 SOC analysts.
• Perform proactive threat hunting to identify indicators of compromise.
• Collaborate with incident response, threat intel, and IT teams in shifts.
• Ensure compliance with information security policies and SLAs.
• Maintain incident reports and threat mitigation playbooks.

Skills

Splunk SIEM engineering

Log analysis

Advanced query writing

Threat hunting

Incident investigation

MITRE ATT&CK

Threat intelligence

Dashboard design

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT

Tools

CrowdStrike

SentinelOne

Microsoft Defender

Job description

Position Summary

Driving intermediate threat investigation, deep log correlation, and proactive incident response across enterprise environments, HyperThink Systems is actively seeking an accomplished SOC L2 Analyst for a 12-month extendable contract engagement in Qatar. In this critical security operations role, you will investigate complex security incidents, tune SIEM use cases, and manage alert thresholds to mitigate sophisticated cyber threats. Bringing 5 to 8 years of progressive professional experience in cybersecurity operations and Splunk SIEM engineering, you will empower enterprise clients to maintain robust defensive postures. This prestigious career opportunity offers competitive remuneration, shift-based flexibility, and exceptional professional growth within a premier technology solutions enterprise.

Detailed Job Description

As a SOC L2 Analyst supporting HyperThink Systems in Qatar, you will take full operational ownership of advanced security incident investigation, threat hunting, SIEM use case tuning, and dashboard optimization. Your day-to-day responsibilities include analyzing complex security alerts, conducting root-cause forensics on compromised endpoints, implementing SIEM use cases and alert tuning, and mentoring L1 analysts. You will collaborate closely with cross-functional incident response, IT infrastructure, and threat intelligence squads in shift-based operational environments while ensuring rapid remediation.

Key Responsibilities

• Conduct advanced security incident investigation, forensic analysis, and rapid remediation across enterprise networks and endpoints.
• Design, test, and implement custom Splunk SIEM use cases, correlation rules, alert tuning policies, and dashboards.
• Analyze threat intelligence feeds and integrate MITRE ATT&CK framework tactics into defensive monitoring controls.
• Provide expert-level guidance and technical escalation support to Tier-1 SOC analysts during complex incidents.
• Perform proactive threat hunting activities to identify hidden indicators of compromise and anomalous network behaviors.
• Collaborate seamlessly with incident response, threat intelligence, and IT infrastructure squads in shift-based rotations.
• Ensure strict adherence to information security policies, regulatory compliance standards, and SLA response times.
• Maintain comprehensive incident reports, forensic documentation, and threat mitigation playbooks.

Required Qualifications & Skills

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 5 to 8 years of progressive professional experience in cybersecurity operations, incident response, or SOC engineering.
• Strong, demonstrable hands-on professional expertise in Splunk SIEM engineering, log analysis, and advanced query writing.
• Comprehensive working knowledge and practical proficiency in security monitoring, threat detection, and incident investigation.
• Deep practical experience building SIEM use cases, tuning alert thresholds, and managing operational dashboards.
• Solid practical experience applying the MITRE ATT&CK framework and threat intelligence in operational environments.
• Proven ability to lead shift-based incident response operations and guide junior analysts effectively.
• Mandatory legal work eligibility and physical availability for professional operations in Qatar.

Nice-to-Have Skills

• Professional security certifications such as GCIH, GCFA, CISSP, or CompTIA SecurityX.
• Prior professional working experience in top-tier managed security service providers (MSSP) or global financial institutions.
• Hands-on familiarity with Endpoint Detection and Response (EDR) platforms like CrowdStrike, SentinelOne, or Microsoft Defender.
• Experience utilizing Python or Bash for scripting automated incident response workflows and log extraction.
• Exposure to agile IT service management frameworks and enterprise ticketing platforms (ServiceNow, Jira).

Application Information

• Salary/Rate: Market Competitive / Enterprise Qatar Security Package
• Deadline: Open until filled (Urgent Qatar SOC L2 Opening)
• Notice Period: Immediate to 30 Days Preferred
• Contract Duration: 12 Months Contract (Extendable, Shift-Based)

Recruitment Pro Tip

When applying for this SOC L2 Analyst position through HyperThink Systems, ensure your resume explicitly highlights your Splunk use case tuning and incident investigation portfolio, details your security certifications, and provides all requested candidate details.