SOC Analyst (L2)

Location: Oman
Nationality: Omani Nationals Only
Experience: 5+ Years
Employment Type: Full-Time
Working Hours: 8×5 (Business Hours)

About the Role

KalSoft is looking for an experienced SOC Analyst (L2) to support Security Operations Center activities, including real-time monitoring, alert investigation, incident escalation, and security incident response. The role will provide second-level analysis, support the L1 SOC team, investigate critical and recurring incidents, and contribute to improving SOC detection, response, and incident-handling processes.

Key Responsibilities

• Monitor security events in real time and perform alert triage and in-depth investigation during business hours.
• Support the L1 SOC team with analysis, investigation, and recommendations.
• Perform second-level review of security alerts to ensure potential incidents are not overlooked.
• Handle incident escalations and coordinate response activities according to agreed SLAs.
• Conduct detailed investigations of critical and recurring security incidents.
• Identify incident trends and recommend detection-rule tuning and improvements.
• Contribute to the development and refinement of SOC use cases, playbooks, and incident-handling procedures.
• Track and monitor incident SLAs daily and ensure timely closure or escalation.
• Review daily incident summary reports for quality assurance.
• Prepare weekly and monthly reports covering incident statistics, SOC performance, and improvement recommendations.
• Coordinate with engineering teams and vendors for issue resolution and system integration.
• Escalate critical security issues and SLA breaches to management when required.

Key Deliverables

• Daily security monitoring and escalation reports.
• Coordination with engineering team.
• Weekly summaries of detection performance and improvement recommendations.

Requirements

• Omani National only.
• Minimum 5+ years of SOC experience.
• Hands-on experience in SOC monitoring, alert triage, incident investigation, and escalation.
• Strong understanding of security incidents, detection rules, use cases, and incident response processes.
• Experience working with SOC teams, engineering teams, and security technology vendors.
• Strong analytical and investigation skills.
• Good understanding of SLA-based incident management and reporting.
• CEH and/or Fortinet NSE certification is required/preferred.
• Good communication and documentation skills.