About the Role
We are seeking an experienced SOC Analyst – Level 2 with hands-on experience in cybersecurity operations and LogRhythm SIEM. The role involves conducting detailed security investigations, analyzing and handling security incidents, managing escalations, providing technical guidance to Level 1 analysts, preparing incident reports, and supporting uninterrupted 24/7 SOC operations.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Conduct detailed security investigations to identify, analyze, and assess potential security threats and incidents.
- Perform in-depth security alert analysis and log correlation using LogRhythm SIEM and other relevant security monitoring tools.
- Analyze and handle security incidents, determine their severity and potential impact, and recommend appropriate response actions.
- Manage escalated security incidents from Level 1 analysts and ensure timely investigation and resolution in accordance with established procedures.
- Provide technical guidance and investigation support to Level 1 SOC analysts.
- Document investigation findings, incident details, response actions, and escalation outcomes accurately.
- Prepare incident reports and contribute to SOC operational and security reporting requirements.
- Coordinate incident-related activities with relevant technical teams to support containment, remediation, and resolution.
- Conduct shift handovers, ensuring continuity of investigations, clear communication of ongoing incidents, and tracking of pending actions.
- Perform operational follow-up activities to ensure incidents are appropriately tracked and resolved.
- Adhere to established SOC procedures, security policies, and operational requirements.
- Support continuous 24/7 SOC operations through rotational shift coverage.
Qualifications
- Hands-on experience in a Security Operations Center (SOC) or cybersecurity operations environment, including advanced security investigations and incident handling.
- Practical experience with LogRhythm SIEM, including security alert analysis, investigation, and log correlation.
- Strong knowledge of security monitoring, alert triage, log analysis, and incident identification.
- Practical experience in incident handling, escalation management, investigation documentation, and reporting.
- Experience providing technical guidance and investigation support to Level 1 SOC analysts.
- Experience in SOC reporting, shift handover, and operational follow-up activities.
- Strong analytical, troubleshooting, communication, and problem-solving skills.
- Ability to work in a 24/7 rotational shift environment, including nights, weekends, and public holidays as required.