SOC Level 2 Analyst

About the role

malomatia, a Qatar-based IT services and solutions provider, is hiring a SOC Level 2 Engineer (SOC Analyst) to support its customers and start a career within the company. The analyst works on multiple solutions including SIEM, SOAR, log management, EDR and vulnerability management, investigating and responding to security incidents and alerts.

Key responsibilities

• Triage and investigate assigned incidents, create incident reports with steps, lessons learned and recommended actions, and modify use cases for false positives
• Create and modify use cases, dashboards and reports; build and run threat-hunting scenarios and integrate with threat intelligence feeds
• Evaluate security products and perform vulnerability assessments and penetration testing
• Create and maintain runbooks for L1 and NOC, follow up on their execution, and write reports analysing threats and IOCs
• Provide communication and escalation during incidents according to SOC guidelines, and liaise with data asset owners and business response plan owners on high-severity incidents
• Analyse logs from different sources, manage threat feeds so they are received, aggregated, reviewed and acted upon, and handle support issues end to end

Required profile

• 4+ years of hands-on experience in information security
• 3+ years in SOC/NOC environments
• Good analytical skills for threat hunting and incident investigation
• Plus 6 years in security or 4 years in SOC operations, and a university degree in Computer Science or Information Technology are good to have

Required skills

• Expert SIEM knowledge: use cases, dashboards, reports, complex queries and threat-intelligence feed integration
• Advanced vulnerability assessment and penetration testing
• Knowledge of DoS, web application attacks, hacking tools (Nmap, Metasploit) and the attack kill chain
• Advanced scripting for automation, and advanced Windows/Linux/Unix knowledge
• Strong analytical skills; moderate forensic investigation knowledge