SOC Analyst; L2

Location: Oman
Nationality: Omani Nationals Only
Experience: 5+ Years
Employment Type: Full-Time
Working Hours: 8×5 (Business Hours)

Kal Soft is looking for an experienced SOC Analyst (L2) to support Security Operations Center activities, including real-time monitoring, alert investigation, incident escalation, and security incident response. The role will provide second-level analysis, support the L1 SOC team, investigate critical and recurring incidents, and contribute to improving SOC detection, response, and incident-handling processes.

• Monitor security events in real time and perform alert triage and in-depth investigation during business hours.
• Support the L1 SOC team with analysis, investigation, and recommendations.
• Perform second-level review of security alerts to ensure potential incidents are not overlooked.
• Handle incident escalations and coordinate response activities according to agreed SLAs
  .
• Conduct detailed investigations of critical and recurring security incidents.
• Identify incident trends and recommend detection-rule tuning and improvements
  .
• Contribute to the development and refinement of SOC use cases, playbooks, and incident-handling procedures
  .
• Track and monitor incident SLAs daily and ensure timely closure or escalation.
• Review daily incident summary reports for quality assurance
  .
• Prepare weekly and monthly reports covering incident statistics, SOC performance, and improvement recommendations.
• Coordinate with engineering teams and vendors for issue resolution and system integration.
• Escalate critical security issues and SLA breaches to management when required.

• Daily security monitoring and escalation reports
  .
• Coordination with
  engineering team
  .
• Weekly summaries of detection performance and improvement recommendations
  .

• Omani National only.
• Minimum 5+ years of SOC experience
  .
• Hands-on experience in SOC monitoring, alert triage, incident investigation, and escalation
  .
• Strong understanding of security incidents, detection rules, use cases, and incident response processes
  .
• Experience working with SOC teams, engineering teams, and security technology vendors.
• Strong analytical and investigation skills.
• Good understanding of SLA-based incident management and reporting
  .
• CEH and/or Fortinet NSE certification is required/preferred.
• Good communication and documentation skills.