SOC Analyst - Tier 2 Investigation

About the role

Madre Integrated Engineering is hiring a full-time SOC Analyst for Tier 2 investigation in Doha, within its oil and gas business. The analyst monitors, analyzes and investigates security alerts and incidents escalated from Tier 1 analysts, and leads detailed incident response work.

Key responsibilities

• Analyze security events, logs, network traffic and endpoint activity to identify malicious behavior.
• Carry out incident triage, investigation, containment, eradication and recovery.
• Analyze IOCs and IOAs to determine the scope and impact of incidents.
• Run proactive threat hunting exercises using SIEM, EDR and threat intelligence platforms.
• Investigate advanced threats, malware, phishing, insider threats and anomalous activity; correlate events across tools to spot attack patterns.
• Develop and improve use cases, detection rules, correlation logic and SOC playbooks.
• Document findings, root cause analysis and incident reports, and support digital forensics and evidence collection when needed.
• Collaborate with IT, infrastructure, network and application teams during incident response, take part in drills and continuous improvement, and mentor junior analysts.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a related field.
• 5-8 years of experience in SOC environments, including at least 3 years of Tier 2 or advanced security investigations.
• CompTIA CySA+ or GIAC Certified Intrusion Analyst (GCIA) certification.

Required skills

• Incident response, threat detection and analysis, network and endpoint security, security monitoring and threat intelligence.
• Enterprise SIEM platforms: Microsoft Sentinel, Splunk, IBM QRadar, ArcSight.
• EDR/XDR solutions such as Microsoft Defender, CrowdStrike, Carbon Black or SentinelOne.