Tier 2 SOC Analyst

Position: Tier 2 SOC Analyst
Location: Tripoli
Employment Type: Full-Time
Reports To: Chief Information Security Officer (CISO)

Role Purpose

Perform advanced security investigations, threat hunting, evidence analysis, root-cause analysis and containment recommendations for escalated cases.

Core Responsibilities

• Investigate escalated alerts and incidents using approved tools and procedures.
• Correlate endpoint, network, identity, application and threat-intelligence evidence.
• Perform proactive threat hunting and document hypotheses and results.
• Develop incident timelines, RCA findings and corrective-action recommendations.
• Support containment and recovery decisions within delegated limits.
• Review Tier 1 escalations and provide quality guidance.
• Maintain complete case evidence and escalate critical exposure promptly.

Key Deliverables

• Investigation and threat-hunting reports.
• Incident timeline and RCA.
• Containment and remediation recommendations.
• Tier 1 quality feedback.
• Complete evidence and case records.

Authority and Escalation

• Authority Level: Advanced analytical and response authority within approved playbooks; cannot independently approve high-impact containment or enterprise risk acceptance.
• Escalates To: SOC Manager/CISO for critical incident, high-impact containment, material business impact or unclear authority.

Capability Requirements

• Technical / Functional Knowledge: Threat hunting, incident investigation, SIEM/EDR, malware/network analysis, evidence handling and RCA.
• Experience: Experienced SOC, incident-response or threat-detection background.
• Education / Certifications: Relevant degree; CySA+, GCIH or comparable certification preferred.
• Core Behaviors: Analytical rigor, curiosity, documentation, teamwork, escalation judgment and resilience.

a.mohamed@fawri.ly

https://wa.me/218919020942

Location: Tripoli_/_طرابلس | Type: Contract_-_عقد_عمل | Category: Information_Security-أمن_المعلومات