Senior Security Incident Handling Specialist

This role primarily focuses on incidents affecting the client’s server infrastructure, including Windows and Linux environments, virtualization platforms, cloud workloads, and storage/backup systems.

Responsibilities:

• Validate and triage incidents from Microsoft Sentinel related to on-premises and cloud-based server workloads.
• Investigate anomalous activity in Azure, AWS, and GCP workloads utilizing Microsoft Defender for Cloud integration.
• Coordinate with infrastructure teams for vulnerability management, patching, isolation, and recovery actions.
• Monitor and escalate incidents in hypervisors (VMware, Hyper-V) and related storage/backup platforms.
• Oversee backup integrity during ransomware incident investigations.
• Assist in building Sentinel automation playbooks for cloud workload incident response.
• Collaborate with MSS NGSOC to ensure that vulnerability intelligence from Microsoft Defender Vulnerability Management is acted upon for infrastructure components.

Skills & Experience:

• Advanced knowledge of Windows/Linux server administration.
• A minimum of 3 years of relevant experience.
• Experience with virtualization platforms, cloud security, and workload protection.
• Familiarity with storage security, backup protection, and ransomware containment strategies.

Location: Dubai, United Arab Emirates (On-site)

Work Conditions: Full-time