Location: Abu Dhabi, UAE
Employment Type: Full-time
Job Summary
We are looking for a SOC Analyst to join our cybersecurity team and monitor, detect, investigate, and respond to security threats and incidents. The ideal candidate will have hands-on experience in Security Operations Center environments, SIEM tools, incident response, threat monitoring, and security analysis.
Key Responsibilities
- Monitor security alerts, events, and incidents across the organization's IT environment.
- Analyze and investigate security alerts generated by SIEM, EDR, IDS/IPS, and other security solutions.
- Identify potential security threats, vulnerabilities, and suspicious activities.
- Perform initial triage and classification of security incidents based on severity and impact.
- Escalate confirmed or complex incidents to senior analysts or the incident response team.
- Conduct log analysis and correlate events from multiple security sources.
- Assist with incident response, containment, eradication, and recovery activities.
- Monitor network traffic and endpoint activity for indicators of compromise.
- Investigate phishing emails, malware alerts, unauthorized access, and other security incidents.
- Maintain accurate documentation of incidents, investigations, and actions taken.
- Prepare and maintain security incident reports and daily/weekly SOC reports.
- Support threat intelligence and threat-hunting activities.
- Assist in identifying Indicators of Compromise (IOCs) and emerging cyber threats.
- Follow established SOC procedures, playbooks, and security policies.
- Collaborate with IT, network, infrastructure, and cybersecurity teams to resolve security incidents.
- Continuously improve monitoring rules, detection mechanisms, and SOC processes.
Requirements
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or a related field.
- 2–4 years of experience in a SOC, cybersecurity, security monitoring, or incident response role.
- Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, or similar.
- Knowledge of EDR/XDR, IDS/IPS, firewalls, antivirus, and network security technologies.
- Good understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, VPNs, and common network protocols.
- Knowledge of common cyber threats, attack techniques, and Indicators of Compromise.
- Familiarity with frameworks such as MITRE ATT&CK, NIST, and the Cyber Kill Chain.
- Experience with Windows and Linux security events and log analysis.
- Strong analytical and problem-solving skills.
- Good written and verbal communication skills.
- Ability to work under pressure and respond effectively to security incidents.
Preferred Certifications
- CompTIA Security+
- CompTIA CySA+
- Certified SOC Analyst (CSA)
- GIAC certifications
- Microsoft Security certifications
- Certified Ethical Hacker (CEH)
- Other relevant cybersecurity certifications
Key Skills
SIEM | SOC Monitoring | Incident Response | Threat Detection | Log Analysis | Network Security | EDR/XDR | Threat Intelligence | MITRE ATT&CK | Vulnerability Management | Security Investigation
Candidates based in the UAE are preferred.