SOC Engineer – Managed Security Operations

About the role

The SOC Engineer will design, implement, configure and continuously optimise ZainTECH's Security Operations Centre (SOC) platforms. This hands‑on role ensures secure, scalable monitoring services for enterprise and government customers across the MENA region.

Key responsibilities

• Design, deploy and maintain enterprise SIEM and SOAR platforms, ensuring high availability and scalability.
• Develop, tune and optimise detection content – correlation rules, dashboards, alerts and use‑cases – aligned with MITRE ATT&CK and other frameworks.
• Integrate cloud, infrastructure and third‑party security solutions into the SIEM ecosystem, creating custom parsers and connectors.
• Build and maintain SOAR playbooks to automate investigation, enrichment, notification and response workflows.
• Provide technical support to SOC analysts, troubleshoot platform issues and produce runbooks and documentation.
• Identify and implement automation and process improvements to raise SOC maturity.

Required profile

• Proven experience designing, configuring and operating SIEM and SOAR solutions in a managed‑services environment.
• Strong understanding of security monitoring, incident response and threat‑intelligence frameworks.
• Ability to develop detection logic, reduce false positives and map capabilities to recognised standards.
• Excellent problem‑solving skills and a collaborative mindset to work with consulting, product and delivery teams.

Required skills

• SIEM platforms (e.g., Splunk, QRadar, Elastic)
• SOAR platforms (e.g., Cortex XSOAR, Demisto)
• MITRE ATT&CK framework
• Detection rule development and tuning
• Custom parser and connector development
• Playbook automation and orchestration

What we offer

• Opportunity to work on cutting‑edge security technologies for high‑profile clients.
• Collaborative environment with cross‑functional cybersecurity teams.
• Continuous learning and professional development in the SOC domain.