Full Time Senior SOC Analyst Jobs, in Pentech Solution Federal Territory - Maukerja

Overview

Pentech is seeking a highly motivated and experienced Senior SOC Analyst to join our growing Managed Security Services team. As an MSSP, we safeguard diverse client environments against an evolving threat landscape. This pivotal role leads technical incident investigation, threat hunting, and SOC optimization across our client portfolio, while supporting our Cybersecurity Consultants and mentoring junior analysts. If you are passionate about hands-on technical analysis, thrive in an operational environment, and excel at complex problem-solving, we encourage you to apply.

Responsibilities

Incident Response & Security Operations

Lead and conduct in-depth technical investigations into security incidents across multi-tenant client environments, identifying root cause, scope, and impact.

Escalation Management: For high-severity incidents, immediately notify and brief the dedicated Cybersecurity Consultant (primary client contact) and provide expert technical analysis and backend support throughout the incident lifecycle.

Perform initial forensic triage on compromised client endpoints, networks, and cloud environments to gather intelligence and evidence.

Prepare clear technical incident reports and post-mortem root-cause analyses (RCAs) to feed into the Cybersecurity Consultant for client delivery.

Support client technical inquiries during designated shift hours.

Threat Hunting & Detection Engineering

Proactively hunt for advanced persistent threats (APTs), zero-day exploits, and stealthy techniques across client infrastructures.

Develop, tune, and maintain multi-tenant SIEM correlation rules, EDR detection logic, and custom use cases tailored to varied client environments.

Ingest and operationalize threat intelligence (IOCs and TTPs) to enhance proactive detection capability across all managed clients.

Analyze complex network telemetry, cloud logs, and endpoint data to uncover anomalous behavior and bypass attempts.

MSSP Process Improvement & Service Optimization

Collaborate closely with the broader SOC team, Security Engineers, and Cybersecurity Consultants to continuously optimize detection engineering, incident workflows, and client security posture.

Build, refine, and document standardized SOC playbooks and runbooks to streamline client alert triage and response across the team.

Partner with Security Engineers to harden managed security stack controls (SIEM, EDR, WAF, IPS), reducing false-positive noise and improving mean time to detect/respond (MTTD/MTTR).

Identify opportunities for SOAR playbook automation and work alongside Security Engineers to streamline repetitive operational tasks.

Work with Cybersecurity Consultants during client onboarding and architecture reviews to ensure optimal log ingestion, detection coverage, and alignment with client expectations.

Mentorship & Internal Collaboration

Provide technical leadership, coaching, and escalation support to Junior SOC analysts.

Collaborate closely with Pentech Cybersecurity Consultants, providing them with technical data and operational insights required for client engagements.

Collaborate with internal Pentech teams (Engineering, Onboarding, Operations) to drive continuous service improvement.

Stay current with emerging threat trends, attack vectors, and regulatory compliance requirements impacting Pentech's client base.

Key Performance Indicators (KPIs)

SLA Adherence: Maintain >98% compliance with client SLAs across all incident severities (MTTD < 15 minutes for critical alerts; initial containment technical guidance delivered within defined SLA windows during shift hours).

False Positive (FP) Reduction: Achieve a 15–20% quarterly reduction in false-positive alerts across managed security platforms through targeted tuning, filtering, security hardening proposals and exception modeling.

Detection Engineering & Use Case Development: Author, validate, and propose at least 2–3 custom detection rules/use cases per quarter across SIEM and EDR platforms, mapped directly to the MITRE ATT&CK framework.

Proactive Threat Hunting: Plan and execute at least 1 structured, hypothesis-driven threat hunt per month across target client environments, producing actionable remediation recommendations and new detection rules.

Client Engagement & Technical Quality: Maintain a > 90% satisfaction rating (CSAT) from internal Cybersecurity Consultants and client stakeholders regarding technical precision, communication clarity, and escalation timeliness during shift windows.

Documentation & Reporting Accuracy: Ensure 100% on-time delivery of detailed technical incident briefs and Root Cause Analyses (RCAs) within 24 hours of high-severity incident resolution.

Skills and Experience We Are Looking For

Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

5+ years of dedicated experience in Security Operations (SOC), Incident Response, or Threat Hunting.

Minimum of 3 years operating as a Tier 2/Tier 3 SOC Analyst within an MSSP or multi-tenant enterprise environment.

Deep hands-on experience querying and analyzing logs within core security platforms (SIEM, EDR/XDR, Firewalls, IPS, Web Proxies, Cloud Security tools).

Strong understanding of network protocols, operating systems (Windows, Linux, macOS), and attack frameworks (MITRE ATT&CK).

Ability to work effectively within an escalation hierarchy, partnering seamlessly with client-facing Cybersecurity Consultants and internal Security Engineers during critical incidents and optimization projects.

Shift Requirement & Client Engagement: Require to work shift rotations (including night shifts, weekends, or public holidays) to ensure continuous 24/7/365 coverage.

Good To Have Qualifications

Active industry certifications: GCIH, GCFA, GNFA, OSCP, CISSP, or vendor-specific SIEM/EDR certifications.

Hands-on experience with SOAR platforms and scripting (Python, PowerShell, Bash) for security automation.

Practical knowledge of digital forensics (DFIR) tools and malware triage concepts.

Familiarity with regulatory frameworks common across MSSP client bases (e.g., ISO 27001, SOC 2, PCI-DSS, HIPAA).