Threat Detection & Threat Hunting

• Perform proactive threat hunting activities to identify malicious activity that may bypass automated controls.
• Utilize threat intelligence sources to identify emerging threats and attacker tactics.
• Analyze attack patterns, indicators, and behaviors associated with Malware ,Ransomware ,Insider threats ,Advanced Persistent Threats (APTs)
• Identify opportunities to improve detection coverage across monitored environments.

SIEM & Detection Engineering

• Develop, tune, and optimize SIEM use cases and correlation rules.
• Support creation and maintenance of Detection logic , Dashboards ,Reports ,Alerts and Monitoring workflows
• Reduce false positives through tuning and rule optimization.
• Support onboarding and integration of new log sources.

Incident Management & Reporting

• Maintain detailed incident records and investigation documentation.
• Prepare technical analysis and incident reports.
• Support operational metrics, reporting, and service reviews.
• Ensure incident handling activities comply with established procedures and SLAs.

Technical Leadership & Knowledge Transfer

• Provide guidance and mentoring to L1 SOC Analysts.
• Support analyst development through coaching and technical knowledge sharing.
• Participate in continuous improvement initiatives and SOC maturity programs.
• Contribute to process, playbook, and procedure development.

Our Culture & Code of Conduct:

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do from how we work with each other to how we engage with clients and partners globally.

Desired Candidate Profile

• Minimum 3 years experience in managed cybersecurity / SOC operations at an investigative level.
• Strong SIEM investigation, detection-rule development, log and network analysis, and use-case tuning.
• Bachelor s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.
• Security +, GCIA, GCIH certification preferred

Threat Detection & Threat Hunting

• Perform proactive threat hunting activities to identify malicious activity that may bypass automated controls.
• Utilize threat intelligence sources to identify emerging threats and attacker tactics.
• Analyze attack patterns, indicators, and behaviors associated with Malware ,Ransomware ,Insider threats ,Advanced Persistent Threats (APTs)
• Identify opportunities to improve detection coverage across monitored environments.

SIEM & Detection Engineering

• Develop, tune, and optimize SIEM use cases and correlation rules.
• Support creation and maintenance of Detection logic , Dashboards ,Reports ,Alerts and Monitoring workflows
• Reduce false positives through tuning and rule optimization.
• Support onboarding and integration of new log sources.

Incident Management & Reporting

• Maintain detailed incident records and investigation documentation.
• Prepare technical analysis and incident reports.
• Support operational metrics, reporting, and service reviews.
• Ensure incident handling activities comply with established procedures and SLAs.

Technical Leadership & Knowledge Transfer

• Provide guidance and mentoring to L1 SOC Analysts.
• Support analyst development through coaching and technical knowledge sharing.
• Participate in continuous improvement initiatives and SOC maturity programs.
• Contribute to process, playbook, and procedure development.

Our Culture & Code of Conduct:

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do from how we work with each other to how we engage with clients and partners globally.

Desired Candidate Profile

• Minimum 3 years experience in managed cybersecurity / SOC operations at an investigative level.
• Strong SIEM investigation, detection-rule development, log and network analysis, and use-case tuning.
• Bachelor s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.
• Security +, GCIA, GCIH certification preferred