SOC Analyst II: Threat Hunting & Detection Engineer

ZainTECH; Kuwait City; On-site; KWD 11,160 - 20,088; Full time

Job summary

ZainTECH is seeking a SOC Analyst - Tier 2 to advance security monitoring, incident investigation, threat analysis, and detection engineering within our SOC. You will serve as the primary escalation point for incidents from L1 analysts and play a key role in validating threats, conducting investigations, and supporting incident response across enterprise and critical infrastructure environments.

Responsibilities include advanced correlation across logs, network activity, and threat intel;

Qualifications

• Minimum 3 years experience in managed cybersecurity / SOC operations at an investigative level.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.
• Strong SIEM investigation, detection-rule development, log and network analysis, and use-case tuning.
• Security +, GCIA, GCIH certification preferred

Responsibilities

• Investigate and analyze security incidents escalated by SOC L1 analysts.
• Validate security events and determine scope, impact, severity, and business risk.
• Develop, tune, and optimize SIEM use cases and correlation rules.
• Support incident containment, eradication, and recovery activities.
• Mentor L1 SOC Analysts and contribute to SOC maturity programs.

Skills

SIEM investigation

Detection rule development

Log analysis

Network analysis

Use-case tuning

Education

Bachelor’s degree in Cybersecurity/Information Security/CS/IT/Engineering

Security+ or GCIA/GCIH certifications preferred

Job description

ZainTECH is seeking a SOC Analyst - Tier 2 to advance security monitoring, incident investigation, threat analysis, and detection engineering within our SOC. You will serve as the primary escalation point for incidents from L1 analysts and play a key role in validating threats, conducting investigations, and supporting incident response across enterprise and critical infrastructure environments.

Responsibilities include advanced correlation across logs, network activity, and threat intel;