Madre Integrated Engineering is seeking a SOC Analyst - Tier 2 Investigation to join their team. This role involves monitoring, analyzing, and investigating security alerts and incidents escalated from Tier 1 analysts, as well as collaborating with IT, infrastructure, network, and application teams during incident response activities.
Key Responsibilities:
- Perform detailed analysis of security events, logs, network traffic, and endpoint activities to identify malicious behavior.
- Conduct incident triage, investigation, containment, eradication, and recovery activities.
- Analyze Indicators of Compromise (IOCs) and Indicators of Attack (IOAs) to determine the scope and impact of security incidents.
- Perform proactive threat hunting exercises using SIEM, EDR, and threat intelligence platforms.
- Investigate advanced threats, malware infections, phishing attacks, insider threats, and anomalous activities.
- Correlate events from multiple security tools to identify attack patterns and potential breaches.
- Develop and enhance use cases, detection rules, correlation logic, and SOC playbooks.
- Document investigation findings, root cause analysis, and incident reports.
- Support digital forensics activities and evidence collection when required.
- Participate in security incident response drills and continuous improvement initiatives.
- Mentor junior SOC analysts and provide technical guidance on complex investigations.
Experience Required:
- 5-8 years of experience in Cyber Security Operations Center (SOC) environments.
- Minimum 3+ years of experience performing Tier 2 or advanced security investigations.
Education Qualifications:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Professional certification: Comp TIA Cy SA+ (Cybersecurity Analyst), or GIAC Certified Intrusion Analyst (GCIA).
Skills Required:
- Security Incident Response
- Threat Detection and Analysis
- Network Security
- Security Monitoring
- Microsoft Sentinel
- Splunk
- IBM QRadar
- Arc Sight
- Crowd Strike
- Carbon Black
- Sentinel One
Employment / Job Type:
Full Time
Nationality:
Any Nationality
About the Company:
A Qatar based manpower and facility management company supplying engineering and technical talent to large infrastructure and industrial projects. Services include engineering staffing, manpower outsourcing, planned and reactive maintenance, and integrated facility management. It supports clients in construction, oil and gas, education and hospitality, with offices in Bahrain and Australia.
Company Industry:
Oil & Gas
Department / Functional Area:
IT / Security
Closing Date:
Not mentioned (apply as soon as possible)
#J-18808-Ljbffr