SOC Analyst L2 OT/IT - (Nozomi + Palo Alto Cortex)

Role Description

Key Responsibilities

• Investigate and validate L2 incidents escalated from L1 SOC analysts
• Perform contextual analysis, incident investigation, and threat hunting activities
• Monitor OT/IT environments proactively to identify threats and suspicious activity
• Manage and support security platforms including SIEM, EDR, XDR, and SOAR solutions
• Support detection engineering activities including correlation rule tuning and deployment
• Provide mitigation recommendations and support incident response activities
• Escalate complex incidents to L3 teams when required
• Contribute to SOC reporting and knowledge base updates
• Support monitoring for attacks, intrusions, and unusual activities across enterprise environments

Required Technical Skills

• Strong hands-on experience with

Nozomi

• (OT security monitoring/detection)
• Experience with

Palo Alto Cortex XDR and/or Cortex XSOAR

• **Strong SOC investigation and incident triage experience (L2 level)**
• **SIEM/EDR alert analysis and validation expertise**
• **Threat hunting using IOC and Threat Intelligence methodologies**
• **Experience supporting enterprise security operations environments**

& Certifications

• GIAC Certified Incident Handler (GCIH)

• Palo Alto Networks Certified Cybersecurity Associate (PCCSA)

• Certified SOC Analyst (CSA)

• Splunk Core Certified Power User / Cybersecurity Defense Analyst
• Nice to Have
• Arabic speaking candidates preferred
• Detection engineering / SIEM correlation rule development experience
• OT cybersecurity exposure within industrial environments
• Experience collaborating with Vulnerability Management and broader security teams
• Familiarity with KPI-driven SOC operations and SLA environments