Senior SOC Analyst

Apply for Senior SOC Analyst at Qode in Abu Dhabi, AZ, AE. This full‑time on‑site position offers great opportunities for career growth.

Job Description |  Senior SOC Analyst Managed Security Services
• Security Operations Centre

Location:

UAE / Middle East (On‑site / Shift‑based)

Employment Type:

Full‑Time Department:
Managed Security Services – SOC

Experience:

3–6 Years (SOC / Security Operations)

Reports To:

SOC Team Lead

ITHR Technologies Consulting LLC is a technology consulting and professional services organisation supporting enterprises across the UAE and Middle East with digital transformation, cybersecurity, ERP implementation, talent solutions, managed services, and custom application development. Our cybersecurity practice provides a comprehensive portfolio of services including Managed SOC, Digital Forensics & Incident Response (DFIR), Vulnerability Assessment & Penetration Testing (VAPT), Network Security, Brand Protection, Security Advisory, and Managed Security Services.

Our Managed SOC provides 24/7 threat monitoring, detection, and response capabilities to customers across the region. As we continue expanding our cybersecurity managed services portfolio, we are looking for an experienced Senior SOC Analyst to strengthen our Security Operations Centre and deliver high‑quality threat detection, investigation, and incident response services.

We are looking for a technically strong and experienced Senior SOC Analyst to join the ITHR Security Operations team. This is a hands‑on L3‑level role where you will own complex alert investigations, lead incident response activities, conduct proactive threat hunting, and continuously improve detection capabilities across customer environments. As a senior member of the SOC, you will act as the escalation point for junior analysts, contribute to playbook development, and maintain the quality and consistency of SOC deliverables, including customer reporting and post‑incident documentation.

This role is ideal for professionals who thrive in a fast‑paced, multi‑customer MSSP environment and are passionate about solving real‑world security incidents.

• Perform in‑depth triage, investigation, and analysis of security alerts across multiple customer SIEM environments.
• Act as the L3 escalation point for complex or high‑severity incidents escalated by L1/L2 analysts.
• Lead incident response activities including containment, eradication, recovery, and post‑incident review.
• Conduct proactive threat hunting using MITRE ATT&CK, threat intelligence, and customer‑specific risk profiles.
• Develop and tune SIEM detection rules, correlation logic, and alert thresholds.
• Develop and maintain SOC runbooks and incident response playbooks.
• Produce high‑quality incident reports suitable for both technical and business audiences.
• Integrate and ope rationalise threat intelligence including IOCs, TTPs, and threat actor profiles.
• Investigate activity across EDR, network, identity, cloud, and application log sources.
• Mentor and guide L1 and L2 analysts through technical coaching and case reviews.
• Support customer onboarding including log source validation, baseline reviews, and detection use case configuration.
• Participate in shift handovers ensuring complete transfer of active investigations and operational awareness.

3–6 years of hands‑on SOC or Security Operations experience. Minimum 1–2 years operating at an L2/L3 level. Strong experience performing alert triage, incident investigation, and response. MSSP experience is highly desirable. Hands‑on experience with one or more SIEM platforms:
Microsoft Sentinel, Splunk, IBM QRadar, Elastic SIEM. Experience with EDR solutions including:
Crowd Strike Falcon, Sentinel One, Microsoft Defender for Endpoint. Strong understanding of MITRE ATT&CK. Solid knowledge of TCP/IP, DNS, HTTP/S, firewalls, proxies, and network attack techniques. Experience analysing Windows and Linux artefacts including event logs, process trees, registry, persistence mechanisms, and scheduled tasks. Excellent documentation and customer reporting skills. Must possess at least one of the mandatory…