About the Role:
In the current landscape of cybersecurity, when the company investigates an alert, the process mainly relies on the agents themselves to validate the investigation's quality. This role requires a seasoned professional with genuine SOC experience to take ownership of that evaluation.
You will review agent-generated investigations to determine their validity—assessing whether the conclusions are accurate, if the evidence is adequate, and if the analysis is comprehensive enough for an L1 or L2 analyst to take actionable steps. Additionally, you will engage in discussions with customers, drawing from your own experience in conducting investigations and understanding the outputs produced by your team.
This position is technical in nature and focuses on hands-on involvement rather than people management. The ideal candidate is a senior engineer or SOC lead who maintains a close connection to incident response rather than overseeing it from a distance.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities:
- Own corporate IT operations and infrastructure, including the endpoint fleet and the full onboarding and offboarding lifecycle.
- Run identity and access management: SSO, provisioning, joiner/mover/leaver flows, access reviews, and implementation of least privilege principles.
- Manage the device estate through Mobile Device Management (MDM), encompassing enrolment, baseline configuration, patching, and compliance policy.
- Administer the productivity and SaaS stack, including licensing, tenant configuration, and app governance.
- Oversee networking and connectivity, including firewalls, VPN, Wi-Fi, and switching across all sites.
- Maintain IT controls aligned with SOC 2 and ISO 27001, collaborating with security teams on endpoint protection and Endpoint Detection and Response (EDR) coverage.
- Manage the service desk: handling ticketing, SLAs, escalation paths, and generating reports to identify recurring issues.
- Lead and develop a small IT and helpdesk team while managing relationships with vendors, contracts, and the IT budget.
What You Will Bring:
- Proven experience owning corporate IT from end to end, with a focus on endpoint fleet management and large-scale onboarding and offboarding.
- Strong hands-on experience with identity and access management tools such as Okta, Microsoft Entra ID (Azure AD), JumpCloud, or Google Workspace.
- Expertise in device and endpoint management through MDM solutions like Intune, Jamf, Kandji, or Mosyle.
- Administration experience with Microsoft 365 and/or Google Workspace at the admin level, not merely at the end-user level.
- Networking and connectivity experience including firewalls, VPN, Wi-Fi, and switching, using tools like Fortinet, Palo Alto, Cisco Meraki, or Zscaler.
- Background in IT security and compliance, including ownership or audit support for SOC 2 and ISO 27001 controls, as well as endpoints and EDR security, which is particularly important due to the nature of the company.
- Service desk and IT service management ownership experience with platforms such as Jira Service Management, Freshservice, ServiceNow, or Zendesk.
- Experience in leading a small IT or helpdesk team and managing vendors and budgets.
Nice to Have:
- Experience within a regulated or high-security environment.
- Scripting or automation experience for provisioning and fleet management, using languages such as PowerShell, Python, or Bash.
- Multi-site or multi-region IT support experience, particularly across the GCC.
