Senior Detection and Response Engineer

About the Role:
Today, when the company investigates an alert, we largely rely on the agents themselves to tell us whether the investigation was good. We need a human with real SOC experience to own that judgement.
You will be the person who looks at an agent-generated investigation and says whether it holds up: is the conclusion valid, is the evidence sufficient, is it comprehensive enough that an L1 or L2 analyst could actually act on it, or does it need more. You will then hold that same conversation with customers, with the credibility of someone who has run these investigations themselves and seen what their own team produced.
This is a hands-on technical role, not a people management role. We are looking for the senior engineer or SOC lead who stayed close to the incidents, not someone who moved away from them.

Responsibilities:

• Own corporate IT operations and infrastructure, including the endpoint fleet and the full onboarding and offboarding lifecycle
• Run identity and access management: SSO, provisioning, joiner/mover/leaver flows, access reviews and least privilege
• Manage the device estate through MDM, including enrolment, baseline configuration, patching and compliance policy
• Administer our productivity and SaaS stack, including licensing, tenant configuration and app governance
• Own networking and connectivity: firewalls, VPN, Wi-Fi and switching across our sites
• Keep IT controls aligned to SOC 2 and ISO 27001, and work with security on endpoint protection and EDR coverage
• Run the service desk: ticketing, SLAs, escalation paths and the reporting that shows where the recurring pain is
• Lead and develop a small IT and helpdesk team, and manage vendors, contracts and IT budget

What You Will Bring:

• Proven experience owning corporate IT end to end, including endpoint fleet management and onboarding and offboarding at scale
• Strong hands-on identity and access management: Okta, Microsoft Entra ID (Azure AD), JumpCloud or Google Workspace
• Device and endpoint management through MDM: Intune, Jamf, Kandji or Mosyle
• Microsoft 365 and/or Google Workspace administration at admin level, not end user level
• Networking and connectivity experience across firewalls, VPN, Wi-Fi and switching, with tools such as Fortinet, Palo Alto, Cisco Meraki or Zscaler
• IT security and compliance experience, including SOC 2 and ISO 27001 control ownership or audit support, and endpoint security or EDR. Given that we are a security company, this is weighted heavily
• Service desk and ITSM ownership using Jira Service Management, Freshservice, ServiceNow or Zendesk
• Experience leading a small IT or helpdesk team, and managing vendors and budgets

Nice to Have:

• Experience in a regulated or high-security environment
• Scripting or automation for provisioning and fleet management (PowerShell, Python, Bash)
• Multi-site or multi-region IT support experience across the GCC

Location: Dubai/Abu Dhabi
Department: Engineering
Reports To: CTO