Senior Security Incident Handling Specialist – Applications, SaaS & Core Business Platforms

The Senior Security Incident Handling Specialist will cover incidents involving the client’s critical business applications, SaaS platforms, ERP, GIS, and smart city platforms. Key responsibilities include validating and coordinating incident response for application-layer attacks, data leakage, API abuse, and SaaS breaches; liaising with application owners to ensure timely remediation and patching; overseeing Microsoft Defender for Cloud Apps (CASB) policy enforcement and incident handling; supporting Sentinel analytics for application-specific detection use cases; working with MSS NGSOC to tune UEBA for high-value application accounts and privileged user activity; and ensuring business continuity plans are followed during application outages due to cyber incidents.

Skills & Experience: Minimum 5–7 years in NGSOC, incident response, or security engineering roles. Experience with enterprise applications (ERP, CRM, GIS, custom platforms). Knowledge of SaaS security governance and API security best practices. Familiarity with CASB operations and Microsoft Defender for Cloud Apps. Strong familiarity with Microsoft Sentinel, KQL, and Defender suite integrations. Understanding of ITIL, ISO/IEC 27001, and DESC cybersecurity regulations. Ability to coordinate across multiple technical teams and stakeholders. Skills in incident documentation, Root Cause Analysis (RCA) preparation, and post-incident reporting.

Location: Dubai, United Arab Emirates

Work Conditions: On-site, Full-time