SOC Analyst Level 2

Description

The SOC Analyst L2 is responsible for monitoring and defending an organization's IT infrastructure against cyber threats. This role includes handling SIEM configurations, administration, and log source integrations.

The analyst will utilize defined workflows and processes to drive response and mitigation efforts, collect relevant artifacts for incident response activities, and conduct technical analysis on impacted systems. Additionally, the SOC Analyst L2 will validate findings reported by SIEM, take ownership of escalated cases from SIEM Analysts (Tier I), and assess security systems for weaknesses and possible improvements.

Responsibilities

• Monitor and defend an organization's IT infrastructure against security threats.
• Handle SIEM configurations, administration, and log source integrations.
• Utilize defined workflows and processes for incident response and mitigation efforts.
• Collect relevant artifacts in support of incident response activities.
• Conduct technical analysis on impacted systems to determine the impact, scope, and recovery requirements of active and potential cyber incidents.
• Validate findings reported by SIEM.
• Take ownership of cases escalated by SIEM Analysts (Tier I).
• Assess security systems and measures for weaknesses and possible improvements.
• Perform threat and vulnerability analysis.
• Carry out triage to ensure that genuine security incidents are occurring.
• Share and document knowledge with teammates and guide them in resolving complex technical problems.
• Troubleshoot incidents, identify root causes, resolve and document problems, and implement preventive measures.
• Ensure accurate and timely resolution of all assigned issues while adhering to strict SLAs.
• Coordinate the resolution of L1/L2 support issues and escalations as required.
• Design and prepare technical reports, charts, and graphs to record results.
• Lead junior staff members on assigned shifts and provide guidance and training on best practices, operations, SLAs, and communication.
• Work with partners, vendors, and business stakeholders to develop and interpret security policies and procedures.

• Architect, design, implement, support, and evaluate security-focused tools and services.

   

• Required Qualifications & Experience
• Master's or Bachelor's degree in Computer Science or equivalent work experience.
• 5–7 years of experience in Cybersecurity / Security Operations Center (SOC).
• Ability to implement and manage security tools.
• Strong verbal and written communication and interpersonal skills.
• Ability to work collaboratively as part of a team.
• Ability to work independently and provide guidance to new team members.
• Knowledge of information risk, security policies, standards, and regulations related to information security and data confidentiality, including PCI-DSS.
• Understanding of desktop, server, application, database, and network security principles.
• Sound knowledge of cybersecurity threats and trends.
• Strong knowledge of networking, malware analysis, incident response, and cyber etiquette.
• Experience with scripting languages such as Python, PowerShell, and JavaScript.

• Strong proficiency in KQL queries and automation.

   

• Preferred Certifications

• Certifications in Microsoft Security Stack, Microsoft Sentinel, Microsoft Defender, CrowdStrike, and related security technologies.

   

• Benefits & Compensation
• Life Insurance.
• Optional Health Insurance.
• EOBI.
• Voluntary Pension Scheme (as per company policy).
• Complimentary Meals.

• Access to an In-house Gym.

   

• Equal Employment Opportunity
• The organization is an equal opportunity employer committed to fostering an inclusive and diverse workplace. All qualified applicants will receive consideration for employment without discrimination on any legally protected basis.

Experience

5 Years

Apply By

Dec 9, 2026

Required Skills

• SIEM Administration
• Root Cause Analysis
• Log Analysis
• Threat Intelligence
• Incident Management
• Communication Skills
• security tools management
• KQL Queries
• scripting JavaScript
• scripting PowerShell
• Scripting Python
• Malware Analysis
• Network Security
• Vulnerability Analysis
• Threat Analysis
• Technical Analysis
• Incident Response
• Log Source Integration
• SIEM Configuration

Nice to Have Skills

• Microsoft Security Stack
• Microsoft Sentinel
• Microsoft Defender
• CrowdStrike
• Automation
• Cybersecurity Compliance
• Team Leadership