About the Role
We are seeking an experienced cybersecurity professional to take on a key role in incident response, SOC policy, and the development of cyber security center processes and procedures. The ideal candidate will have a strong background in Security Information and Event Management (SIEM), as well as expertise in Incident Response (IR) tools and solutions that aid in detecting, investigating, and responding to security events. This individual will produce cyber intelligence reports and translate technical issues for a wide audience, including technical staff, business representatives, and senior management. Leadership and excellent communication skills are necessary for guiding the cyber team and providing after-hours support when needed.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Develop and refine incident response plans and SOC processes, policies, and procedures.
- Collaborate with SIEM engineers and security teams to enhance correlation rules.
- Analyze security events and provide guidance to team members on investigations and responses.
- Produce comprehensive cyber intelligence reports that communicate technical issues across various audiences.
- Provide leadership to the cyber team, including on-call support outside of normal business hours.
- Administer Endpoint Detection and Response (EDR) technology, including:
- Deploying, upgrading, and maintaining EDR agents on Windows, macOS, and Linux.
- Monitoring agent health and troubleshooting unresponsive agents.
- Developing and managing EDR policies.
- Integrating EDR with SIEM and other security tools.
- Administer Network Detection and Response (NDR) technology, including:
- Developing and managing NDR policies.
- Integrating NDR with SIEM and other security tools.
- Creating custom correlation rules for EDR/NDR and reviewing configurations for enhancements.
- Managing support tickets with EDR/NDR support as needed.
Requirements
- Strong analytical and organizational skills.
- Previous experience in incident response and knowledge of SOC policies, processes, and procedures.
- Proficient in SIEM, EDR, and NDR tools and solutions.
- Excellent verbal and written communication skills to effectively articulate technical and strategic cyber matters.
- Leadership experience with the ability to lead a cyber team.
- Preferred certifications such as GIAC GCIH, GMON, GCFA, or similar certificates.
Benefits
- Opportunities for professional development and career advancement.
- Participation in cutting-edge projects in the field of cybersecurity.
- Engaging work environment that fosters innovation and collaboration.
