SOC Analyst - Tier 1 (Managed SOC)

ZainTECH; Kuwait City; On-site; KWD 6,000 - 9,000; Full time

Job summary

ZainTECH is seeking a SOC Analyst - Tier 1 to join its Managed SOC team in Kuwait City. The role focuses on 24x7 monitoring, event analysis, and incident escalation, ensuring accurate classification and timely escalation according to SLAs.

Responsibilities include triaging alerts from SIEM and other security tools, performing initial validations, and maintaining comprehensive incident records. A bachelor’s degree in cybersecurity or related field is required, with at least 1 year in SOC

Qualifications

• Bachelor’s degree in cybersecurity, information security, computer science, or related field.
• Minimum 1 year of SOC operations experience.
• Familiarity with SIEM consoles, alert triage, and SOC monitoring workflow; willingness to work rotating shifts.

Responsibilities

• Provide 24x7 monitoring of customer and enterprise security environments through shift-based operations.
• Review and classify security alerts to distinguish threats from false positives.
• Perform initial event validation, classification, and prioritization based on severity and impact.
• Create and manage incident tickets; escalate validated incidents per procedures.
• Document investigations and monitoring activities for handovers and reporting.

Skills

SIEM experience

Alert triage

Incident escalation

24x7 monitoring

Cybersecurity basics

Education

Bachelor’s degree in Cybersecurity

Tools

EDR tools

IDS/IPS

Firewalls

Cloud security

Job description

The SOC Analyst - Tier 1 is responsible for providing 24x7 security monitoring, alert triage, event analysis, and incident escalation services within ZainTECH’s Managed Security Operations Center (SOC). As the first line of defense against cybersecurity threats, the role continuously monitors customer environments, validates security events, and ensures potential security incidents are identified, classified, documented, and escalated in accordance with established procedures and service level agreements.

Responsibilities:

Security Monitoring & Event Analysis

• Provide continuous 24x7 monitoring of customer and enterprise security environments through shift-based operations.
• Monitor and analyze security events generated from SIEM platforms, IDS/IPS solutions, Endpoint Detection & Response (EDR) tools, Firewalls, Email security gateways, Web security solutions and Cloud security platforms
• Review and assess security alerts to determine whether activity represents a legitimate security threat or a false positive.
• Perform initial event validation, classification, and prioritization based on severity, risk, and potential business impact.
• Identify suspicious behavior, indicators of compromise (IOCs), and anomalous activities requiring further investigation.

Incident Triage & Escalation

• Perform first-level analysis and triage of security alerts and events.
• Create and manage incident tickets within approved incident management platforms.
• Categorize incidents based on Severity, Impact, Urgency and Threat classification
• Escalate validated incidents to SOC Analyst - Tier 2 teams in accordance with approved escalation procedures.
• Ensure escalations include complete and accurate investigation details to support efficient handover and further analysis.
• Maintain incident tracking and ensure timely updates throughout the incident lifecycle.

SIEM Operations & Security Monitoring

• Utilize SIEM platforms to Monitor security events, Review alerts, Execute predefined searches and queries, Support basic investigations
• Support operational activities including Alert validation, Monitoring dashboard review, Log analysis and Security event correlation
• Assist with identifying false positives and escalating tuning recommendations where required.
• Support the overall effectiveness and reliability of monitoring operations.

Documentation & Reporting

• Maintain accurate records of investigations, observations, and escalation activities.
• Document security incidents and monitoring activities in accordance with operational procedures.
• Participate in shift handovers and ensure continuity of investigations between teams.
• Support operational reporting and SOC performance metrics activities.

Governance, Compliance & Operational Excellence

• Follow approved SOC procedures, playbooks, and operational standards.
• Ensure compliance with Internal security policies and Customer contractual obligations.
• Handle customer information with strict confidentiality and professionalism.
• Participate in training, simulation exercises, and continuous improvement initiatives.
• Maintain awareness of emerging cybersecurity threats and attack techniques.

Our Culture & Code of Conduct:

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.

• Minimum 1 year of SOC operations experience
• Familiarity with SIEM consoles, alert triage, and SOC monitoring workflow; willingness to work rotating shifts.
• Foundational networking and operating-system knowledge is preferable.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.
• Security +, CEH or any relevant certification preferred