SOC L2 Analyst | HyperThink Systems | Qatar

Position Summary

Driving intermediate threat investigation, deep log correlation, and proactive incident response across enterprise environments, HyperThink Systems is actively seeking an accomplished SOC L2 Analyst for a 12-month extendable contract engagement in Qatar. In this critical security operations role, you will investigate complex security incidents, tune SIEM use cases, and manage alert thresholds to mitigate sophisticated cyber threats. Bringing 5 to 8 years of progressive professional experience in cybersecurity operations and Splunk SIEM engineering, you will empower enterprise clients to maintain robust defensive postures. This prestigious career opportunity offers competitive remuneration, shift-based flexibility, and exceptional professional growth within a premier technology solutions enterprise.

Detailed Job Description

As a SOC L2 Analyst supporting HyperThink Systems in Qatar, you will take full operational ownership of advanced security incident investigation, threat hunting, SIEM use case tuning, and dashboard optimization. Your day-to-day responsibilities include analyzing complex security alerts, conducting root-cause forensics on compromised endpoints, implementing SIEM use cases and alert tuning, and mentoring L1 analysts. You will collaborate closely with cross-functional incident response, IT infrastructure, and threat intelligence squads in shift-based operational environments while ensuring rapid remediation.

Key Responsibilities

• Conduct advanced security incident investigation, forensic analysis, and rapid remediation across enterprise networks and endpoints.
• Design, test, and implement custom Splunk SIEM use cases, correlation rules, alert tuning policies, and dashboards.
• Analyze threat intelligence feeds and integrate MITRE ATT&CK framework tactics into defensive monitoring controls.
• Provide expert-level guidance and technical escalation support to Tier-1 SOC analysts during complex incidents.
• Perform proactive threat hunting activities to identify hidden indicators of compromise and anomalous network behaviors.
• Collaborate seamlessly with incident response, threat intelligence, and IT infrastructure squads in shift-based rotations.
• Ensure strict adherence to information security policies, regulatory compliance standards, and SLA response times.
• Maintain comprehensive incident reports, forensic documentation, and threat mitigation playbooks.

Required Qualifications & Skills

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 5 to 8 years of progressive professional experience in cybersecurity operations, incident response, or SOC engineering.
• Strong, demonstrable hands-on professional expertise in Splunk SIEM engineering, log analysis, and advanced query writing.
• Comprehensive working knowledge and practical proficiency in security monitoring, threat detection, and incident investigation.
• Deep practical experience building SIEM use cases, tuning alert thresholds, and managing operational dashboards.
• Solid practical experience applying the MITRE ATT&CK framework and threat intelligence in operational environments.
• Proven ability to lead shift-based incident response operations and guide junior analysts effectively.
• Mandatory legal work eligibility and physical availability for professional operations in Qatar.

Nice-to-Have Skills

• Professional security certifications such as GCIH, GCFA, CISSP, or CompTIA SecurityX.
• Prior professional working experience in top-tier managed security service providers (MSSP) or global financial institutions.
• Hands-on familiarity with Endpoint Detection and Response (EDR) platforms like CrowdStrike, SentinelOne, or Microsoft Defender.
• Experience utilizing Python or Bash for scripting automated incident response workflows and log extraction.
• Exposure to agile IT service management frameworks and enterprise ticketing platforms (ServiceNow, Jira).

Application Information

• Salary/Rate: Market Competitive / Enterprise Qatar Security Package
• Deadline: Open until filled (Urgent Qatar SOC L2 Opening)
• Notice Period: Immediate to 30 Days Preferred
• Contract Duration: 12 Months Contract (Extendable, Shift-Based)

Recruitment Pro Tip

When applying for this SOC L2 Analyst position through HyperThink Systems, ensure your resume explicitly highlights your Splunk use case tuning and incident investigation portfolio, details your security certifications, and provides all requested candidate details.