We are seeking a technical SOC Specialist with 3-5 years' experience to drive high-level incident response and threat detection within our 24/7 Security Operations Center. This role is responsible for the full incident lifecycle—from initial triage and traffic analysis to host recovery and remediation. The ideal candidate combines deep knowledge of Windows/Linux environments with the ability to design automated SOAR playbooks that enhance our defensive posture.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities:
-
Incident Management & Response:
- Provide continuous 24/7 oversight of security events and alerts.
- Manage and categorize alerts from SIEM, Anti-DDoS, and other security solutions based on urgency and risk.
- Lead technical response activities, including host triage, containment, and recovery.
- Conduct remote system analysis and implement remediation efforts.
- Maintain the full incident response lifecycle adhering to established SLAs.
-
Security Automation & Intelligence:
- Identify opportunities for automation in manual workflows and design automated playbooks in the SOAR platform.
- Apply a detailed understanding of the MITRE ATT&CK Framework to identify and map attacker techniques.
- Analyze global threat landscapes to stay ahead of adversaries.
- Study vulnerabilities and provide technical recommendations for corrective actions and reporting.
-
Technical Expertise & Maintenance:
- Maintain deep knowledge of Security Technologies, Operating Systems (Windows & Linux), and analysis tools.
- Utilize extensive experience in log correlation and analysis to detect and investigate suspicious patterns.
- Ensure all findings, communication, and mitigation steps are thoroughly recorded in the ticketing system.
Qualifications:
- BSc in Computer Science, Electrical/Computer/Software Engineering.
- Mandatory: SIEM Based Trainings, FortiSOAR Training.
- Preferred: GCIH Certified, Incident Handler Training, Linux+, Security+, CCNA, CCNA Security, FortiSOAR Certification.
- Thorough experience in a Security Operations Center environment.
- Experience in handling Cyber Security Incidents and familiarity with SIEM technologies.
- Expertise in automation potential in SOC manual processes and designing transformation into automated SOC/IR playbooks.
- Understanding of the global threat landscape and experience with log analysis.
- Ability to write and execute complex queries using KQL (Kusto Query Language).
- Experience with security monitoring tools, including SIEM, Anti-DDoS, IPS, EDR, firewalls, and MFA systems.
- Flexible to work in shifts and willing to assist the team during overtime if needed.
- Sound understanding of common network services, network vulnerabilities, and network attack patterns.
Work Conditions: On-site, Full-time
Location: Abu Dhabi, Abu Dhabi Emirate, United Arab Emirates
