SOC Analyst - Tier 1 (Managed SOC)

About the role

The SOC Analyst – Tier 1 provides 24x7 security monitoring, alert triage, and incident escalation for customers of ZainTECH’s Managed Security Operations Center. Acting as the first line of defense, the analyst continuously watches security events, validates alerts, and ensures incidents are documented and escalated according to service level agreements.

Key responsibilities

• Monitor customer and enterprise security environments around the clock using shift‑based operations.
• Analyze security events from SIEM platforms, IDS/IPS, EDR tools, firewalls, email and web security gateways, and cloud security solutions.
• Validate alerts, classify severity, prioritize based on risk, and create incident tickets.
• Escalate verified incidents to Tier 2 analysts with complete investigation details.
• Execute predefined SIEM queries, support basic investigations, and recommend tuning to reduce false positives.
• Maintain accurate records of investigations, handovers, and reporting metrics.
• Follow approved SOC procedures, playbooks, and compliance requirements.

Required profile

• Ability to work in a 24x7 shift environment and handle multiple alerts simultaneously.
• Strong attention to detail for accurate incident documentation and escalation.
• Familiarity with SOC processes, playbooks, and incident lifecycle management.

Required skills

• Experience with SIEM platforms for event monitoring and correlation.
• Knowledge of IDS/IPS, Endpoint Detection & Response (EDR) tools, firewalls, email security gateways, web security solutions, and cloud security platforms.
• Proficiency in log analysis, alert validation, and security event correlation.
• Experience using incident ticketing or management systems.