SOC Analyst – Tier 2 (Managed SOC)

About the role

The SOC Analyst – Tier 2 joins ZainTECH's Security Operations Center to lead advanced security monitoring, incident investigation, and detection engineering. You will act as the primary escalation point for incidents raised by L1 analysts and support response activities across enterprise, government, and critical infrastructure environments.

Key responsibilities

• Investigate and analyse security incidents escalated from L1, determining scope, impact, severity and business risk.
• Perform advanced correlation of logs, alerts, network activity, endpoint telemetry and threat intelligence.
• Conduct proactive threat‑hunting to uncover malicious activity that bypasses automated controls.
• Develop, tune and optimise SIEM use cases, correlation rules, dashboards, reports and alerts.
• Maintain detailed incident records, produce technical analysis reports and ensure compliance with procedures and SLAs.
• Mentor L1 analysts, share technical knowledge and contribute to SOC maturity initiatives.

Required profile

• Minimum 3 years of experience in managed cybersecurity or SOC environments.
• Proven ability to handle complex incident investigations and escalations.
• Strong understanding of threat‑intelligence sources and attacker tactics.
• Experience supporting incident containment, eradication and recovery.

Required skills

• SIEM platforms and detection engineering (use‑case development, rule tuning).
• Log analysis, correlation and dashboard/report creation.
• Threat hunting and threat‑intelligence integration.
• Incident response and root‑cause analysis.
• Knowledge of malware, ransomware, insider threats and APTs.

What we offer

• Opportunity to work on high‑impact security projects for critical sectors.
• Collaborative culture built on innovation, integrity and customer‑centricity.
• Professional development and mentorship within a mature SOC.