SOC Analyst – Tier 2 (Managed SOC)

About the role

The SOC Analyst – Tier 2 will work in ZainTECH’s Security Operations Center, handling advanced security monitoring, incident investigation and detection engineering for enterprise, government and critical‑infrastructure environments. The role acts as the primary escalation point for alerts raised by Level‑1 analysts and supports the full incident response lifecycle.

Key responsibilities

• Investigate and analyse security incidents escalated from L1, validating events, assessing scope, impact and business risk.
• Perform deep correlation of logs, alerts, network traffic, endpoint telemetry and threat‑intelligence feeds.
• Conduct root‑cause analysis, identify indicators of compromise and support containment, eradication and recovery actions.
• Execute proactive threat‑hunting activities to uncover malicious activity that bypasses automated controls.
• Develop, tune and optimise SIEM use cases, correlation rules, dashboards, reports and alert workflows.
• Maintain detailed incident records, produce technical analysis reports and ensure compliance with SLAs.
• Mentor L1 analysts, share knowledge and contribute to playbook and process improvements.

Required profile

• Bachelor’s degree or equivalent intermediate diploma.
• Experience working in a Security Operations Center or similar environment.
• Ability to guide junior analysts and communicate findings clearly.

Required skills

• SIEM platforms and use‑case development.
• Log analysis and correlation.
• Threat intelligence integration.
• Detection engineering and rule tuning.
• Incident investigation and root‑cause analysis.
• Network activity monitoring and endpoint telemetry.
• Threat hunting techniques.