Urwah Admin

ZainTech

<div>The SOC Analyst - Tier 2 is responsible for advanced security monitoring, incident investigation, threat analysis, and detection engineering activities within ZainTECH&rsquo;s Security Operations Center (SOC). The role serves as the primary escalation point for security incidents identified by L1 analysts and plays a critical role in validating threats, conducting investigations, and supporting incident response activities across enterprise, government, and critical infrastructure environments.
Responsibilities:
Security Monitoring &amp; Incident Investigation<ul><li>
Investigate and analyze security incidents escalated by SOC L1 analysts.</li><li>
Validate security events and determine scope, impact, severity, and business risk.</li><li>
Perform advanced correlation and analysis of logs, alerts, network activity, endpoint telemetry, and threat intelligence.</li><li>
Conduct root cause analysis of security incidents and identify indicators of compromise (IOCs).</li><li>
Support incident containment, eradication, and recovery activities.</li><li>
Escalate incidents requiring specialized investigation or incident response support.</li></ul>
Threat Detection &amp; Threat Hunting<ul><li>
Perform proactive threat hunting activities to identify malicious activity that may bypass automated controls.</li><li>
Utilize threat intelligence sources to identify emerging threats and attacker tactics.</li><li>
Analyze attack patterns, indicators, and behaviors associated with Malware ,Ransomware ,Insider threats ,Advanced Persistent Threats (APTs)</li><li>
Identify opportunities to improve detection coverage across monitored environments.</li></ul>
SIEM &amp; Detection Engineering<ul><li>
Develop, tune, and optimize SIEM use cases and correlation rules.</li><li>
Support creation and maintenance of Detection logic , Dashboards ,Reports ,Alerts and Monitoring workflows</li><li>
Reduce false positives through tuning and rule optimization.</li><li>
Support onboarding and integration of new log sources.</li></ul>
Incident Management &amp; Reporting<ul><li>
Maintain detailed incident records and investigation documentation.</li><li>
Prepare technical analysis and incident reports.</li><li>
Support operational metrics, reporting, and service reviews.</li><li>
Ensure incident handling activities comply with established procedures and SLAs.</li></ul>
Technical Leadership &amp; Knowledge Transfer<ul><li>
Provide guidance and mentoring to L1 SOC Analysts.</li><li>
Support analyst development through coaching and technical knowledge sharing.</li><li>
Participate in continuous improvement initiatives and SOC maturity programs.</li><li>
Contribute to process, playbook, and procedure development.</li></ul>
Our Culture &amp; Code of Conduct:
At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do &mdash; from how we work with each other to how we engage with clients and partners globally. 
Requirements 
<ul><li>
Minimum 3 years experience in managed cybersecurity / SOC operations at an investigative level.</li><li>
Strong SIEM investigation, detection-rule development, log and network analysis, and use-case tuning.</li><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.</li><li>
Security +, GCIA, GCIH certification preferred</li></ul></div>

SOC Analyst - Tier 2 (Managed SOC)

<div>The Microsoft 365 Endpoint &amp; Identity Consultant is responsible for the end-to-end implementation, configuration, and deployment of the identity and endpoint security foundation across the Microsoft 365 ecosystem. You will own the delivery of Microsoft Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Conditional Access, and Windows Autopilot solutions, ensuring secure, compliant, and well-governed Zero Trust environments for enterprise and public-sector clients.
This is a hands-on consulting and engineering role focused on delivering production-ready identity and endpoint management solutions, translating security and business requirements into secure Microsoft 365 configurations, and ensuring successful deployment, operational readiness, and knowledge transfer.
Responsibilities:
Microsoft 365 Identity &amp; Endpoint Implementation<ul><li>
Solution Design &amp; Deployment: Design, configure, and deploy Microsoft Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Conditional Access, and Windows Autopilot solutions based on client security and business requirements.
</li><li>Identity &amp; Access: Configure Conditional Access, Multi-Factor Authentication (MFA), passwordless authentication, Privileged Identity Management (PIM), Identity Governance, Entitlement Management, Self-Service Password Reset (SSPR), and B2B access.
</li><li>Endpoint Management: Deploy and manage Microsoft Intune device enrollment, compliance policies, configuration profiles, mobile application management (MAM), Windows Autopilot, Windows 365, and Azure Virtual Desktop (where applicable).
</li><li>Endpoint Protection: Deploy Microsoft Defender for Endpoint, configure attack surface reduction policies, endpoint detection and response (EDR), device risk management, and integrate security signals with Conditional Access.
</li></ul>Zero Trust &amp; Security Implementation<ul><li>
Zero Trust Architecture: Implement Zero Trust principles by integrating identity, device compliance, and access controls to enforce least-privilege access.
</li><li>Identity Governance: Configure Privileged Identity Management (PIM), access reviews, entitlement management, and identity lifecycle governance.
</li><li>Conditional Access: Implement risk-based access policies using user, device, and sign-in risk signals to strengthen enterprise security.
</li><li>Endpoint Security: Configure device compliance, application protection, endpoint hardening, and security baselines across Windows, macOS, iOS, and Android devices.
</li></ul>Deployment Ownership &amp; Delivery Excellence<ul><li>
End-to-End Delivery: Own the complete deployment lifecycle from discovery workshops and security assessments through implementation, pilot deployments, production rollout, and operational handover.
</li><li>Configuration Baselines: Develop reusable secure configuration baselines, deployment templates, PowerShell automation scripts, and operational runbooks.
</li><li>Documentation: Produce technical design documents, secure configuration guides, implementation documentation, operational runbooks, and knowledge transfer materials.
</li><li>Client Advisory: Act as a trusted advisor by translating client security objectives into Microsoft 365 Zero Trust solutions and recommending best practices.
</li></ul>Stakeholder Collaboration<ul><li>
Collaborate closely with Collaboration &amp; Content, Data Security &amp; Compliance, Copilot &amp; AI, and Cybersecurity / Managed SOC teams to deliver integrated Microsoft 365 security solutions.
</li><li>Conduct discovery workshops, security assessments, design reviews, and deployment planning sessions with client stakeholders.
</li><li>Support operational readiness by ensuring deployed solutions align with enterprise governance, compliance, and security standards.
</li></ul>Our Culture &amp; Code of Conduct:
At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do &mdash; from how we work with each other to how we engage with clients and partners globally. 
Requirements 
<ul><li>
Hands-on experience with Microsoft Entra ID, Microsoft Intune, Microsoft Defender for Endpoint, Conditional Access, Windows Autopilot, Windows 365, and Azure Virtual Desktop.
</li><li>Strong understanding of Microsoft 365 identity architecture, endpoint management, and Zero Trust security principles.
</li><li>Expertise implementing Conditional Access, Multi-Factor Authentication (MFA), passwordless authentication, Privileged Identity Management (PIM), Identity Governance, Entitlement Management, and Self-Service Password Reset (SSPR).
</li><li>Experience designing and implementing least-privilege access models and risk-based authentication.
</li><li>Experience deploying Microsoft Intune device management, compliance policies, configuration profiles, application protection (MAM), and Windows Autopilot.
</li><li>Experience implementing Microsoft Defender for Endpoint, endpoint detection and response (EDR), attack surface reduction, and device risk management.
</li><li>Strong understanding of Zero Trust architecture, device compliance, identity protection, and risk-based access control.
</li><li>Working knowledge of MENA regulatory and data residency requirements affecting Microsoft 365 deployments, including SAMA CSF, NCA ECC, SDAIA, and UAE/Saudi PDPL.
</li><li>Experience with PowerShell scripting and automation for Microsoft 365 administration, deployment, and configuration management.
</li><li>Strong requirements gathering, solution design, client workshop facilitation, and technical documentation skills.
</li><li>Ability to translate business security objectives into scalable Microsoft 365 identity and endpoint solutions.
</li><li>Produce clear solution designs, secure configuration documentation, deployment guides, operational runbooks, and knowledge transfer documentation.
</li><li>5+ years of hands-on experience deploying and configuring Microsoft identity and endpoint technologies within consulting, professional services, systems integration, or managed security environments.
</li><li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field (or equivalent practical experience).
</li><li>Certifications (Preferred) : Microsoft Certified: Endpoint Administrator Associate (MD-102), Microsoft Certified: Identity and Access Administrator Associate (SC-300) , Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
</li><li>Additional Microsoft Security certifications are advantageous.
</li><li>Must be fluent in English.
</li><li>Working proficiency in Arabic is highly desirable.
</li><li>Location: MENA region with flexibility to support client engagements across Saudi Arabia, UAE, Kuwait, Bahrain, Jordan, Iraq, Egypt, and Sudan.
</li><li>Engagement: Full-time, responsible for the end-to-end delivery of Microsoft 365 identity, endpoint management, and Zero Trust solutions across enterprise and public sector clients.</li></ul></div>

Microsoft 365 Endpoint & Identity Consultant

<div>The Senior Microsoft Presales Engineer is responsible for driving customer engagement, solution positioning, and technical presales activities across Microsoft Infrastructure, Security, Modern Workplace, and Cloud solutions. The role acts as a trusted technical advisor to enterprise customers, supporting digital transformation initiatives through consultative solution design, technical workshops, demonstrations, and strategic customer engagements.
Working closely with Account Managers, Architects, Product teams, and Microsoft stakeholders, the engineer plays a key role in identifying customer requirements, positioning Microsoft technologies, developing technical proposals, and supporting pipeline growth across the region. The role combines deep Microsoft technical expertise with strong customer-facing, presentation, and solution-selling capabilities.
Responsibilities:
Customer Engagement &amp; Solution Consulting<ul><li>
Engage with customers to understand: Business challenges, Security and infrastructure requirements, Digital transformation objectives, and Existing technology environments
</li><li>Conduct assessments of customer infrastructure, cloud, and security landscapes
</li><li>Support customers in defining technical requirements and contributing to: RFP responses, RFI documentation and Technical solution requirements
</li><li>Act as a trusted advisor throughout the customer engagement lifecycle</li></ul>
Solution Positioning &amp; Technical Presales<ul><li>
Position Microsoft solutions as best-in-class offerings by articulating: Business value, Competitive advantages, Technical capabilities and Security and operational benefits
</li><li>Demonstrate Microsoft solution advantages over competitive technologies and existing customer environments</li><li>
Support customers throughout technical evaluations and decision-making processes
</li><li>Prepare Technical proposals, Solution presentations, Architecture recommendations and Technical response documentation</li></ul>
Microsoft Security, Cloud &amp; Infrastructure Solutions<ul><li>
Design and position solutions across: Microsoft 365 E3 &amp; E5, Microsoft Security &amp; Compliance solutions, Microsoft Defender Suite, Microsoft Sentinel (SIEM), Azure Active Directory (SSO, MFA, Identity Security), Microsoft Purview and Data Protection solutions, Intune and Endpoint Management, Azure Infrastructure, Backup, DR, and Migration services, Hybrid and on-premise Microsoft infrastructure solutions
</li><li>Support Azure sizing, migration, and modernization discussions with enterprise customers
</li><li>Maintain strong awareness of Microsoft cloud, infrastructure, and security best practices
</li></ul>Workshops, Demonstrations &amp; Technical Presentations<ul><li>
Lead Customer workshops, Technical demonstrations, Solution presentations and Executive briefings
</li><li>Deliver tailored presentations addressing customer-specific business and technical challenges
</li><li>Educate customers on Microsoft cloud, infrastructure, and cybersecurity capabilities
</li><li>Support customer enablement and awareness initiatives across Microsoft technologies</li></ul>
Pipeline Development &amp; Sales Support<ul><li>
Contribute to pipeline generation and opportunity development activities as part of the Presales organization
</li><li>Support opportunity qualification, technical validation, and deal progression across strategic customer engagements
</li><li>Collaborate closely with Sales and Account Management teams to align technical and commercial strategies
</li><li>Maintain visibility on opportunity progression and customer engagement activities</li></ul>
Cross-Functional Collaboration<ul><li>
Work closely with Account Managers, Technical Architects, Product teams, Delivery teams and Microsoft stakeholders
</li><li>Support successful transition from presales to delivery and implementation phases
</li><li>Collaborate with customer IT and security teams to ensure solution alignment and technical readiness</li></ul> 

Requirements 
<ul><li>
8+ years of experience in Microsoft solution sales, Technical presales, Cloud and infrastructure consulting, Enterprise ICT environments
</li><li>Strong expertise across Microsoft Cloud, Security, Productivity, Infrastructure solutions
</li><li>Strong understanding of Enterprise security principles, Cloud migration and modernization, Identity and access management, Data protection and compliance solutions
</li><li>Experience supporting enterprise and strategic customer engagements
</li><li>Familiarity with non-Microsoft security technologies such as VMware, Trend Micro EPP/EDR, Forcepoint DLP 
is highly desirable
</li><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Engineering or a related technical field</li><li>
Microsoft cloud and security certifications are an advantage</li></ul></div>

Senior Microsoft Presales Engineer

Join ZainTech and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

ZainTech

About Company

SOC Analyst - Tier 2 (Managed SOC)

Microsoft 365 Endpoint & Identity Consultant

Senior Microsoft Presales Engineer