About the Job:
The company is a leader in AI-powered cloud and digital infrastructure, providing transformative technology solutions globally. The mission is to redefine digital transformation, combining sovereign capabilities with scalable, high-performance compute infrastructure.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
The Opportunity:
We are seeking a Senior (L3) Incident Analyst to strengthen the technical capabilities of our 24×7 Security Operations Center. The role involves detecting, triaging, investigating, and responding to security incidents across our private-cloud platform. The successful candidate will own incidents from initial alert to resolution, while also providing mentorship for less-experienced analysts.
Key Responsibilities:
- Monitor security alerts in Splunk and perform triage and investigation of security events.
- Act as a senior technical decision point and escalate findings when necessary.
- Own security incidents throughout the entire response lifecycle.
- Develop and maintain incident response playbooks and standard operating procedures.
- Create and optimize Splunk correlation searches and alerts.
- Conduct threat hunting and apply threat intelligence to investigations.
- Maintain detailed records of incidents and support audit and compliance requirements.
Location:
Abu Dhabi Emirate, United Arab Emirates
Work Conditions:
- Position: Full-time
- Type: Hybrid working arrangement
- Schedule: 24×7 Security Operations Center with rotational shifts (day, evening, night), including weekends and public holidays.
Qualifications:
Required Skills:
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent experience).
- 5–8 years of experience in security operations or incident response, with at least 2 years in a senior role.
- Advanced experience with Splunk including SPL, dashboard development, and alert creation.
- Familiarity with Cribl for data routing and log enrichment.
Technical Skills:
- Proficiency in SIEM (Splunk), data pipelines (Cribl), EDR (Elastic Security), and incident response frameworks.
- Basic understanding of networking and operating systems (Windows/Linux).
- Scripting proficiency in Python, Bash, or PowerShell.
Preferred Qualifications:
- Industry certifications such as Splunk Certified Power User, GIAC (e.g., GCIA, GCIH), or equivalent hands-on defensive certifications.
- Experience with monitoring OpenStack and Kubernetes/OpenShift environments.
What We Offer:
- Competitive salary and performance-based yearly bonuses.
- Comprehensive health insurance for you and your family.
- Access to premium learning and development platforms for career growth.
At the company, we are committed to creating a diverse and inclusive work environment, fostering a culture of trust, accountability, and high performance. Join us in inspiring progress and making a meaningful impact.
