Microsoft Azure Sentinel (Arabic Speaker)

We are seeking a skilled SIEM Engineer with strong hands-on experience in Microsoft Azure Sentinel to join our cybersecurity team in the UAE. The ideal candidate will be responsible for monitoring, analyzing, and responding to security events, improving threat detection capabilities, and supporting security operations in a regulated enterprise environment.

Key Responsibilities:

• Configure, manage, and optimize Microsoft Azure Sentinel (SIEM)
• Monitor security alerts and conduct incident investigation and response
• Develop and fine-tune analytics rules, alerts, and dashboards
• Integrate data sources including:
  • Azure AD
  • Microsoft Defender (Endpoint, Identity, Office 365)
  • Firewalls, servers, and cloud workloads
• Perform log analysis and threat hunting activities
• Create and maintain KQL queries for advanced detection use cases
• Support security incident response and escalation processes
• Prepare incident reports, dashboards, and compliance documentation
• Collaborate with SOC, IT, and cloud teams to enhance security posture
• Support audits and regulatory security requirements (where applicable)

Required Skills & Qualifications:

• 3–5 years of experience in SIEM / SOC / Security Operations
• Strong hands-on expertise with Microsoft Azure Sentinel
• Proficiency in Kusto Query Language (KQL)
• Experience integrating multiple log sources and security tools
• Solid understanding of incident response lifecycle, threat detection and analysis, and the MITRE ATT&CK framework
• Familiarity with Microsoft security tools (Defender suite preferred)
• Strong documentation and reporting skills
• Fluent Arabic communication skills (spoken and written)

Certifications:

• Microsoft Azure Sentinel Certification (Mandatory)
• Microsoft Security Operations Analyst (SC-200) – Preferred
• Other cybersecurity certifications are a plus

Location: Dubai, United Arab Emirates

Job Type: On-site, Full-time