SOC Analyst – Tier 1 (Managed SOC)

About the role

The SOC Analyst – Tier 1 provides 24x7 security monitoring, alert triage, and incident escalation for ZainTECH's Managed Security Operations Center. As the first line of defense, you will continuously watch customer environments, validate security events, and ensure incidents are properly classified and escalated.

Key responsibilities

• Monitor customer and enterprise security environments around the clock using shift‑based operations.
• Analyze alerts from SIEM, IDS/IPS, EDR, firewalls, email and web security gateways, and cloud security platforms.
• Validate, classify, and prioritize events based on severity, risk, and business impact.
• Perform first‑level incident triage, create tickets, and escalate validated incidents to Tier 2 analysts.
• Utilize SIEM tools for searches, queries, and basic investigations, and assist with false‑positive identification.
• Maintain accurate documentation of investigations, incidents, and handovers.
• Follow SOC procedures, playbooks, and compliance requirements, including NCSC Jordan licensing.

Required profile

• Ability to work in a shift‑based 24x7 environment.
• Strong analytical mindset for detecting suspicious behavior and indicators of compromise.
• Attention to detail and ability to follow documented processes and escalation procedures.

Required skills

• Experience with SIEM platforms.
• Knowledge of IDS/IPS solutions.
• Familiarity with Endpoint Detection & Response (EDR) tools.
• Understanding of firewalls, email security gateways, and web security solutions.
• Exposure to cloud security platforms.
• Proficiency with incident management platforms and log analysis.
• Ability to perform security event correlation.