SOC Analyst - Tier 2 (Managed SOC)

The SOC Analyst - Tier 2 is responsible for advanced security monitoring, incident investigation, threat analysis, and detection engineering activities within ZainTECH’s Security Operations Center (SOC). The role serves as the primary escalation point for security incidents identified by L1 analysts and plays a critical role in validating threats, conducting investigations, and supporting incident response activities across enterprise, government, and critical infrastructure environments.

Responsibilities:

Security Monitoring & Incident Investigation 

• Investigate and analyze security incidents escalated by SOC L1 analysts. 
• Validate security events and determine scope, impact, severity, and business risk. 
• Perform advanced correlation and analysis of logs, alerts, network activity, endpoint telemetry, and threat intelligence. 
• Conduct root cause analysis of security incidents and identify indicators of compromise (IOCs). 
• Support incident containment, eradication, and recovery activities. 
• Escalate incidents requiring specialized investigation or incident response support. 

Threat Detection & Threat Hunting 

• Perform proactive threat hunting activities to identify malicious activity that may bypass automated controls. 
• Utilize threat intelligence sources to identify emerging threats and attacker tactics. 
<