SOC Tier 2 Investigator: Incident Response Specialist

AimGulf; Doha; On-site; QAR 240,000 - 420,000; Full time

Job summary

Madre Integrated Engineering is seeking a SOC Analyst - Tier 2 Investigation to join their security operations team in Doha, Qatar. This role focuses on monitoring, analyzing, and investigating security alerts escalated from Tier 1 analysts, with collaboration across IT, infrastructure, network, and applications during incident response.

Responsibilities include incident triage, IOC/IOA analysis, threat hunting with SIEM/EDR tools, and development of detection rules and SOC playbooks.

Qualifications

• 5–8 years of experience in SOC environments.
• Minimum 3+ years in Tier 2 or advanced security investigations.
• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• Professional certification: CompTIA CySA+ (Cybersecurity Analyst), or GIAC Certified Intrusion Analyst (GCIA).

Responsibilities

• Perform detailed analysis of security events, logs, network traffic, and endpoint activities to identify malicious behavior.
• Conduct incident triage, investigation, containment, eradication, and recovery activities.
• Analyze Indicators of Compromise (IOCs) and Indicators of Attack (IOAs) to determine the scope and impact of security incidents.
• Perform proactive threat hunting exercises using SIEM, EDR, and threat intelligence platforms.
• Investigate advanced threats, malware infections, phishing attacks, insider threats, and anomalous activities.
• Correlate events from multiple security tools to identify attack patterns and potential breaches.
• Develop and enhance use cases, detection rules, correlation logic, and SOC playbooks.
• Document investigation findings, root cause analysis, and incident reports.
• Support digital forensics activities and evidence collection when required.
• Participate in security incident response drills and continuous improvement initiatives.
• Mentor junior SOC analysts and provide technical guidance on complex investigations.

Skills

Security Incident Response

Threat Detection

Network Security

Security Monitoring

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

CrowdStrike

Carbon Black

SentinelOne

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

CrowdStrike

Carbon Black

SentinelOne

Job description

Madre Integrated Engineering is seeking a SOC Analyst - Tier 2 Investigation to join their security operations team in Doha, Qatar. This role focuses on monitoring, analyzing, and investigating security alerts escalated from Tier 1 analysts, with collaboration across IT, infrastructure, network, and applications during incident response.

Responsibilities include incident triage, IOC/IOA analysis, threat hunting with SIEM/EDR tools, and development of detection rules and SOC playbooks.