SOC Analyst (Level 2) – Security Operations Center

About the role

KalSoft is looking for an experienced SOC Analyst (L2) to support Security Operations Center activities, including real‑time monitoring, alert investigation, incident escalation, and security incident response. The role provides second‑level analysis, supports the L1 SOC team, investigates critical and recurring incidents, and helps improve SOC detection and response processes.

Key responsibilities

• Monitor security events in real time and perform alert triage and in‑depth investigation during business hours.
• Support the L1 SOC team with analysis, investigation, and recommendations.
• Perform second‑level review of security alerts to ensure potential incidents are not overlooked.
• Handle incident escalations and coordinate response activities according to agreed SLAs.
• Conduct detailed investigations of critical and recurring security incidents.
• Identify incident trends and recommend detection‑rule tuning and improvements.
• Contribute to the development and refinement of SOC use cases, playbooks, and incident‑handling procedures.
• Track and monitor incident SLAs daily and ensure timely closure or escalation.
• Prepare weekly and monthly reports covering incident statistics, SOC performance, and improvement recommendations.
• Coordinate with engineering teams and vendors for issue resolution and system integration.

Required profile

• Omani national only.
• Minimum 5+ years of SOC experience.
• Hands‑on experience in SOC monitoring, alert triage, incident investigation, and escalation.
• Strong understanding of security incidents, detection rules, use cases, and incident response processes.
• Experience working with SOC teams, engineering teams, and security technology vendors.
• Good analytical, investigation, communication, and documentation skills.
• CEH and/or Fortinet NSE certification required/preferred.

Required skills

• CEH certification
• Fortinet NSE certification