SOC Analyst Level 2 – Security Operations Center

About the role

As a SOC Analyst Level 2 you will join SecurityHQ’s 24/7 Security Operations Centre in Dubai, handling complex security incidents for multiple customers. You will work closely with Level 1 analysts, incident responders and security engineers to investigate, contain and remediate threats.

Key responsibilities

• Perform in‑depth investigations of incidents escalated from Level 1 analysts.
• Analyze events across SIEM, EDR, network, endpoint and cloud security tools.
• Identify attack vectors, determine root cause and assess impact.
• Lead containment, mitigation and remediation activities with internal and customer teams.
• Develop and enhance detection rules, use cases, SOC playbooks and monitoring capabilities.
• Participate in proactive threat hunting and continuous improvement initiatives.
• Provide technical guidance and mentoring to junior analysts.
• Produce detailed incident reports, root‑cause analyses and customer‑facing communications.

Required profile

• 2–5 years of experience in a SOC, MSSP or cybersecurity operations environment.
• Strong investigative and response skills on SIEM and EDR platforms.
• Solid understanding of attack techniques and threat‑actor behavior.
• Ability to work rotating shifts, including weekends and holidays.

Required skills

• SIEM platforms
• EDR solutions
• Network security monitoring
• Endpoint security analysis
• Cloud security technologies
• Malware and phishing investigation
• Threat hunting
• Detection rule development
• Incident response processes

What we offer

• On‑site role in Dubai with access to three customer locations.
• Opportunity to mentor junior analysts and shape detection capabilities.
• Dynamic MSSP environment with continuous learning.