SOC Analyst - Tier 3 (Managed SOC)

The SOC Analyst - Tier 3 is responsible for leading and managing ZainTECH’s Security Operations Center (SOC) team, ensuring effective delivery of security monitoring, threat detection, incident response coordination, and operational security services. The role provides technical leadership and operational oversight across SOC functions while ensuring compliance with service level agreements, customer requirements, and local regulations. Responsibilities: SOC Operations Management - Lead daily SOC operations across all monitoring and response activities. - Ensure continuous 24x7 monitoring coverage and effective shift management. - Oversee incident handling, escalation, and investigation activities. - Ensure adherence to customer SLAs and operational procedures. - Monitor SOC performance and service quality metrics. Incident Management & Escalation - Act as the primary escalation point for high-severity security incidents. - Coordinate incident response activities across technical teams and stakeholders. - Support containment, investigation, eradication, and recovery efforts. - Review incident reports and ensure quality of investigation outputs. - Participate in major incident and crisis management activities. Team Leadership & Development - Lead, mentor, and develop SOC analysts across all levels. - Conduct Performance reviews ,Coaching sessions and Knowledge transfer initiatives - Support recruitment, onboarding, and training activities. Threat Detection & Operational Improvement - Drive continuous improvement of monitoring and detection capabilities. - Review and approve Use cases , Correlation rules , Dashboards and Operational procedures - Identify gaps in detection coverage and operational effectiveness. - Support SOC maturity and service enhancement initiatives. Governance, Reporting & Stakeholder Management - Prepare operational reports and service reviews. - Participate in customer meetings and security governance discussions. - Ensure compliance with Internal security policies and Regulatory obligations. - Maintain operational documentation, procedures, and playbooks. Our Culture & Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.

SOC Operations Management: Lead daily SOC operations across all monitoring and response activities. Ensure continuous 24x7 monitoring coverage and effective shift management. Oversee incident handling, escalation, and investigation activities. Ensure adherence to customer SLAs and operational procedures. Monitor SOC performance and service quality metrics. Incident Management & Escalation: Act as the primary escalation point for high-severity security incidents. Coordinate incident response activities across technical teams and stakeholders. Support containment, investigation, eradication, and recovery efforts. Review incident reports and ensure quality of investigation outputs. Participate in major incident and crisis management activities. Team Leadership & Development: Lead, mentor, and develop SOC analysts across all levels. Conduct performance reviews, coaching sessions, and knowledge transfer initiatives. Support recruitment, onboarding, and training activities. Threat Detection & Operational Improvement: Drive continuous improvement of monitoring and detection capabilities. Review and approve use cases, correlation rules, dashboards and operational procedures. Identify gaps in detection coverage and operational effectiveness. Support SOC maturity and service enhancement initiatives. Governance, Reporting & Stakeholder Management: Prepare operational reports and service reviews. Participate in customer meetings and security governance discussions. Ensure compliance with internal security policies and regulatory obligations. Maintain operational documentation, procedures, and playbooks.