Our Core Business Values
Arab Solutions believes that technology is at the forefront of empowering people and organisations throughout the world. Our core business values are, therefore, to discover opportunities for creating a transformation to use our knowledge and expertise in supporting positive change and to enable people in producing powerful new developments.

We deliver on time and in budget
 Using a consultative approach, our experts identify which areas of our clients business can benefit from our services. This transforms IT from overhead cost, albeit one that provides commodity services, into a strategic value-add for our clients business. Arab Solutions is committed to meeting our client’s needs as well as working within their budgetary parameters.

Arab Solutions

Role Title: L2 OT/IT SOC Analyst&nbsp;
Role Summary The L2 SOC Analyst will provide advanced monitoring, investigation, threat hunting, and platform management across OT/IT environments, acting as the escalation point for L1 and coordinating with L3 when required. The role supports detection and response to information security threats to protect systems, networks, applications, and operational technology where applicable.&nbsp;
Must-Have Technical Skills
<ul>
<li>Nazoomi (OT security monitoring / detection support)(client requirement)</li>
<li>Palo Alto Cortex (XDR and/or XSOAR)(client requirement)</li>
<li>Strong SOC investigation experience (L2) including SIEM/EDR alert triage and validation tools</li>
<li>Threat hunting using IOCs and Threat Intelligence &nbsp;</li>
</ul>
Key Responsibilities (L2)
<ul>
<li>Investigate and qualify L2 incidents escalated from L1; perform contextual investigation and analysis</li>
<li>Proactively monitor and hunt through customer environments; manage security platforms to detect/respond to threats</li>
<li>Provide recommendations and required mitigation; support client incident notification as needed</li>
<li>SIEM use-case support: correlation rule design, deployment, and fine-tuning; maintain/update SOC knowledge base</li>
<li>Escalate to Level 3 when required and support major incidents with assigned tasks</li>
<li>Contribute to periodic reporting (weekly/monthly/quarterly, etc.) and monitoring for attacks/intrusions/unusual activity&nbsp;</li>
</ul>
Experience Requirements
<ul>
<li>Proven experience in SOC operations with L2 incident handling and escalation management</li>
<li>Experience with alert monitoring, incident response, and threat detection across enterprise environments</li>
<li>Ability to work in a KPI-driven, 24x7 SOC environment</li>
</ul>
Nice to Have
<ul>
<li>Correlation rules/detection engineering exposure</li>
<li>Experience collaborating with Vulnerability Management and broader security stakeholders</li>
</ul>