business analyst

data analyst

financial analyst

analyst

security specialist

cybersecurity analyst

<div>
 <p>
  <strong>
   About Us
  </strong>
 </p>
 <p>
  HWG &ndash; Dubai Branch is part of a global cybersecurity group with over 200 professionals protecting organizations across Europe and the Middle East. We specialize in advanced cybersecurity services, from threat detection and incident response to compliance, governance, and SOC.
 </p>
 <p>
  With more than 15 years of experience, our mission is simple: help businesses stay secure, resilient, and ahead of evolving threats.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Summary
  </strong>
 </p>
 <p>
  We are looking for a skilled and motivated SOC Tier 1 Analyst to join our Global cybersecurity team. The successful candidate will play a crucial role in monitoring, analysing, and responding to cybersecurity events, as well as supporting client relationships. This position requires solid technical knowledge, a proactive mindset, and strong teamwork skills.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <p>
  &middot; Perform threat monitoring and initial incident management
 </p>
 <p>
  &middot; Analyse cybersecurity events using monitoring systems (e.g., SIEM platforms such as QRadar, Splunk, Sentinel)
 </p>
 <p>
  &middot; Escalate and support the in-depth analysis of critical issues to Tier 2
 </p>
 <p>
  &middot; Collaborate with peers to identify and reduce false positives
 </p>
 <p>
  &middot; Support the definition of new detection use cases and response playbooks
 </p>
 <p>
  &middot; Coordinate and respond to security incidents under the guidance of senior analysts
 </p>
 <p>
  &middot; Manage communications with clients during security incidents
 </p>
 <p>
  &middot; Contribute to the preparation and enrichment of recurring reports (weekly, monthly, annual)
 </p>
 <p>
  &middot; Participate in client meetings to discuss findings and reports
 </p>
 <p>
  &middot; Work on shift as part of SOC operations.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required Hard Skills:
  </strong>
 </p>
 <p>
  &middot; Strong knowledge of IT and cybersecurity fundamentals
 </p>
 <p>
  &middot; Solid understanding of major operating systems
 </p>
 <p>
  &middot; Strong understanding of computer networks and firewalls
 </p>
 <p>
  &middot; Hands-on experience with monitoring tools (QRadar, Splunk, Sentinel, etc.)
 </p>
 <p>
  &middot; Good knowledge of email security (cloud and on-premise)
 </p>
 <p>
  &middot; Proficiency in Microsoft Office Suite
 </p>
 <p>
  &middot; Familiarity with ITSM tools
 </p>
 <p>
  . Availability to work in rotational shifts including night and weekends
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Required Soft Skills:
  </strong>
 </p>
 <p>
  &middot; Residence in UAE
 </p>
 <p>
  &middot; Goal-oriented and proactive
 </p>
 <p>
  &middot; Excellent interpersonal and teamwork abilities
 </p>
 <p>
  &middot; Flexibility and composure under stressful situations
 </p>
 <p>
  &middot; Strong attention to detail, analytical thinking, and problem-solving skills
 </p>
 <p>
  &middot; Excellent communication skills in English (Arabic is a strong advantage)
 </p>
 <p>
  &middot; Strong coordination skills across multicultural, cross-functional teams
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Why Join Us?
  </strong>
 </p>
 <ul>
  <li>
   Opportunity to work in a growing cybersecurity environment
  </li>
  <li>
   Collaborative and dynamic team culture
  </li>
  <li>
   Real impact on security operations and client success
  </li>
 </ul>
 <p>
  Be part of a high-impact cybersecurity team in one of the world&rsquo;s most dynamic digital regions.
 </p>
 <p>
  Apply now and help secure the future of our clients across the GCC, HereWeGo!
 </p>
</div>


SOC Tier 1 Analyst

Al Rostamani International Exchange

<div><p>Every employee at Al Rostamani Group plays a role in making a real difference to the business and our customers. We care for our employees by offering them meaningful and purposeful work and an opportunity to grow, learn, contribute and succeed. Today, the Al Rostamani Group has come a long way since its birth in 1957. Our group has grown steadfastly with the guiding principles of Commitment, Care &amp; Vision, alongside a strong sense of active involvement in the community. We are a well-diversified group, with a key presence in industries such as General Trading, Automobiles and Heavy Equipment, Travel, Foreign Exchange, Financial Services, Property Management, Construction, Infrastructure Development and Information Technology Services. Our Group employs approximately 2000 people from 41 different nationalities, which contributes to our multicultural and multi-national environment.</p>
<div><div><div><h2 class="jobSectionHeader"><b>
Job Purpose</b></h2>
</div><div><p>
The Data Security Analyst is responsible for protecting the organisation&rsquo;s digital assets by ensuring that data handling and processing are secure and compliant with internal policies, applicable regulations, and industry best practices. This role is pivotal in identifying and mitigating security threats, enforcing adherence to security standards, and maintaining a robust cybersecurity infrastructure. The Analyst will work closely with the IT Security &amp; Governance Manager, the Group Information Technology and various departments to implement security controls, monitor network activity for potential threats, and respond to security incidents. Key responsibilities also include developing and refining security protocols, conducting regular assessments, and providing actionable recommendations to strengthen the organisation&rsquo;s overall security posture.<br>
The specialist will collaborate with cross-functional teams, provide insights to senior management, and foster a culture of security awareness throughout the organisation.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>
Job Responsibilities</b></h2>
</div><div><p><b>
Technical Responsibilities</b></p>
<ul><li>Vulnerability Assessment and Penetration Testing: Conduct comprehensive VA/PT across IT infrastructure, including servers, web applications, APIs, and mobile applications.</li>
<li>Security Incident Response: Investigate and respond to security incidents, including preparing incident reports and documentation.</li>
<li>Security Configuration Management: Monitor and maintain security configurations in cloud platforms (AWS, Azure, Microsoft 365, Microsoft Fabric) and administer technical controls like firewalls, WAF, NAC, PAM, etc.</li>
<li>Secure Coding Practices: Identify vulnerabilities in application code and provide technical guidance to development teams on secure coding practices.</li>
<li>Data Protection Tools Management: Monitor and maintain data protection tools such as DLP, Data Classification, Privacy Management, SWG, SEG, EDR, MDM, and SOC dashboards.</li>
<li>Technical Due Diligence: Conduct technical due diligence on new applications, assessing their architecture, performance, scalability, and compliance with security standards.</li>
<li>Security Technology Research: Actively research, evaluate, and drive next-generation security technologies and solutions to meet organizational requirements.</li>
<li>Network Traffic Analysis: Analyse network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches.</li>
<li>Business Responsibilities</li>
<li>Audit Coordination and Remediation: Support the coordination of internal and external audits, track security audit findings, and report remediation efforts.</li>
<li>Governance Policy Management: Support the development, maintenance, and regular review of governance policies, procedures, and frameworks.</li>
<li>Risk Assessment and Management: Conduct Data Protection Impact Assessments, implement robust data privacy controls, and identify, analyse, and mitigate data privacy risks and ensure compliance with regulatory requirements.</li>
<li>Security Training and Awareness: Assist in developing and delivering security training programs and awareness campaigns for employees.</li>
<li>Compliance Monitoring: Monitor adherence to IT and security governance frameworks and recommend improvements.</li>
<li>Vendor Liaison: Liaise with vendors for POCs and demos of new IT security requirements.</li>
<li>Security Requirements Analysis: Analyse business requirements and provide objective advice on IT security needs.</li>
<li>Employee Support: Address employee concerns or questions on various aspects of security and compliance and gather feedback to improve systems.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Requirements</b></h2>
</div><div><ul><li>Bachelor's degree or higher in a relevant field.</li>
<li>Security certifications such as Certified Ethical Hacker (CEH) or CompTIA Security+ are preferred.</li>
<li>Proven experience (typically 3+ years) in information security.</li>
<li>Strong knowledge of cloud security, cybersecurity frameworks, standards, and best practices.</li>
<li>Strong understanding of data governance frameworks, regulatory requirements, and industry standards</li>
<li>Excellent communication and interpersonal skills.</li>
<li>Demonstrated ability to influence and collaborate with cross-functional teams.</li>
<li>In-depth understanding of risk management, compliance, and governance principles</li>
</ul>
</div></div></div><p>At Al Rostamani Group, we seek talented people who work hard to achieve great things. We consider not only your skills and experience, but also your passion for the role, your desire to learn and how well you align with our core values of care, commitment and vision. If this position represents an opportunity you wish to pursue, we invite you to apply.</p></div><p></p>

Data Security Analyst

Wipro

<div>Job Description<p></p><div><div><ul><li><div><b><br>
</b><br>
</div></li></ul></div></div><div><div><div><div>Job Title: Cyber Security Analyst - L4
</div></div></div></div><div><div><div><div>City: Dubai
</div></div></div></div><div><div><div><div>State/Province: Dubai
</div></div></div></div><div><div><div><div>Posting Start Date: 12/5/25
</div></div></div></div><div><div><div><div>Job Description:
<div><div><div><h2 class="jobSectionHeader"><b>Job Description
</b></h2></div><div><p><b>Role Purpose<br>
</b></p><p><br>
The purpose of this role is to analyse, identify, rectify &amp; recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information<br>
<br>
</p></div></div><div><div><h2 class="jobSectionHeader"><b>&#847;
</b></h2></div><div><h1 class="jobSectionHeader"><b>Do
</b></h1><ul><li><h2 class="jobSectionHeader"><b>Ensuring customer centricity by providing apt cybersecurity
</b></h2></li><li>Monitoring and safeguarding the log sources and security access
</li><li>Planning for disaster recovery in the event of any security breaches
</li><li>Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
</li><li>Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
</li><li>Conduct security assessments, risk analysis and root cause analysis of security incidents
</li><li>Handling incidents escalated by the L1 team in 24x7 rotational shifts
</li><li>Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
</li><li>Completing all tactical security operations tasks associated with this engagement.
</li><li>Analyses all the attacks and come up with remedial attack analysis
</li><li>Conduct detailed analysis of incidents and create reports and dashboards
</li><li><h2 class="jobSectionHeader"><b>Stakeholder coordination &amp; audit assistance
</b></h2></li><li>Liaise with stakeholders in relation to cyber security issues and provide future recommendations
</li><li>Maintain an information security risk register and assist with internal and external audits relating to information security
</li><li>Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
</li><li>Advice and guidance to employees on issues such as spam and unwanted or malicious emails
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>&#847;
</b></h2></div><div><h1 class="jobSectionHeader"><b>Deliver
</b></h1><div><div><div><div><p><b>No.<br>
</b></p></div><div><p><b>Performance Parameter<br>
</b></p></div><div><p><b>Measure<br>
</b></p></div></div><br>
<div><div><p>1.<br>
</p></div><div><p>Customer centricity<br>
 </p></div><div><p>Timely security breach solutioning to end users, Internal stakeholders &amp; external customers experience<br>
</p></div></div><br>
<div><div><p>2.<br>
</p></div><div><p>Process Adherence<br>
</p></div><div><p>Adherence to SLA&acirc;&#128;&#153;s (90-95%), response time and resolution time TAT
</p></div></div><br>
</div></div></div></div><div><div><h2 class="jobSectionHeader"><b>&#847;
</b></h2></div></div><div></div><div><div><h2 class="jobSectionHeader"><b>&#847;</b></h2></div></div></div></div></div></div></div></div><p></p>

Cyber Security Analyst - L4

Emirates Investment Bank pjsc

<div>
 <p>
  <strong>
   Job Purpose:
  </strong>
 </p>
 <p>
  The Senior Associate &ndash; Security Operations Centre (SOC) will play a pivotal role within the Information Security team, serving as a primary responder to cybersecurity threats targeting the bank&rsquo;s critical systems and digital infrastructure across both cloud environments and on-premises. This position is responsible for the continuous monitoring, analysis, and response to security incidents, while ensuring the confidentiality, integrity, and availability of critical systems.
 </p>
 <p>
  The role also involves close collaboration with cross-functional teams to enhance the bank&rsquo;s security operations capabilities and maintain a robust cybersecurity posture.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Monitor, analyze, and respond to security events using MXDR SIEM, EDR, and DLP tools.
  </li>
  <li>
   Lead end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident reviews.
  </li>
  <li>
   Correlate internal telemetry with threat intelligence to identify and mitigate emerging risks.
  </li>
  <li>
   Conduct proactive threat hunting and anomaly detection across hybrid environments (on-prem and cloud).
  </li>
  <li>
   Manage and optimize SOC dashboards, reports, and KPIs for operational visibility and executive reporting.
  </li>
  <li>
   Provide oversight and monitoring of premise and cloud environments (Azure), ensuring alignment with security best practices.
  </li>
  <li>
   Collaborate with IT, Desktop, and Application teams to ensure the critical systems and application logs (On premise and Cloud) are sent to the SIEM to monitor.
  </li>
  <li>
   Support regulatory compliance assessments (UAE IA, SWIFT, PCI-DSS) through gap assessments and remediation tracking.
  </li>
  <li>
   Perform vulnerability and compliance baseline scans (Qualys)and coordinate with IT Operation on patching activities.
  </li>
  <li>
   Continuously improve SOC processes, playbooks, and automation workflows to enhance efficiency and response times.
  </li>
  <li>
   Conduct user access reviews, Firewall/IPS rule/policy checks, and security device configuration audits.
  </li>
  <li>
   Develop and monitor data leakage prevention and data classification solutions, escalate data leakage alerts to the manager, and ensure banks data classified, monitored and protected in accordance with the data classification policy.
  </li>
  <li>
   Plan and deliver security awareness programs, phishing simulations, and targeted information security training.
  </li>
  <li>
   Support in creating, reviewing, and updating security policies, guidelines, and procedures.
  </li>
  <li>
   Review alerts from brand protection solution and coordinate with the vendor to mitigate such alerts.
  </li>
  <li>
   Support in conducting risk assessments, user access review for critical applications, Infrastructure, and cloud environment and third parties who offer critical services to the bank.
  </li>
  <li>
   Mentor Trainee and contribute to the overall maturity and capability uplift of the SOC.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualification &amp; Certification:
  </strong>
 </p>
 <p>
  <strong>
   <u>
    Education &amp; Technical Proficiency:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Master&rsquo;s or bachelor&rsquo;s degree in computer engineering, Information Security, or a related field from recognized University.
  </li>
  <li>
   Working experience in different Information security / IT Security domains.
  </li>
  <li>
   Working knowledge or familiarity of Splunk, Azure Sentinel, Forcepoint Proxy, Azure Security.
  </li>
  <li>
   Hands on experience in DLP and Data Classification Solutions (e.g., Forcepoint, Microsoft Purview).
  </li>
  <li>
   Solid understanding of cloud security (Microsoft Azure) monitoring and compliance standards.
  </li>
  <li>
   Vulnerability and Compliance management tools (Qualys) and log aggregation platforms.
  </li>
  <li>
   Familiarity with GRC or risk management platforms (e.g., ServiceNow GRC, MetricStream) is an advantage.
  </li>
  <li>
   Familiarity with automation scripting (e.g., Python) is a plus.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Certifications:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Information Security Certifications: Azure Security Engineer (AZ-500), CISA, Security+, CEH, GCIA, or equivalent industry certifications. (any two certifications are must)
  </li>
  <li>
   Professional certifications such as CCSK, CISM, CRISC (good to have).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience &amp; Skills:
  </strong>
 </p>
 <p>
  <strong>
   <u>
    Experience:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   6-7 years of progressive experience in cybersecurity, with at least 3-4 years in a banking or financial services SOC environment.
  </li>
 </ul>
 <p>
  <strong>
   <u>
    Skills:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Strong analytical and problem-solving abilities with and report writing skills.
  </li>
  <li>
   Excellent communication skills, capable of translating complex technical issues for non-technical stakeholders.
  </li>
  <li>
   High ownership mindset with the ability to perform under pressure in a challenging environment.
  </li>
  <li>
   Effective stakeholder management and a collaborative team player.
  </li>
  <li>
   Passion for continuous learning and staying current with the evolving threat landscape.
  </li>
 </ul>
</div>


Senior Associate – Security Operation Centre

DICETEK LLC

<div><p>We are looking for highly skilled cybersecurity consultants with extensive hands-on experience in SOC design, SIEM engineering, Incident Response, Threat Detection, and building cybersecurity maturity. Consultants should be proficient in building SOCs from scratch, developing SIEM use-cases, MITRE mapping, IR playbooks, and defining cybersecurity strategy.</p><p>
</p><p><b>Key Responsibilities:</b></p><p>
Lead technical cybersecurity discussions with IT, vendors, and stakeholders.</p><p>
Ensure alignment with regulatory requirements and security best practices.</p><p>
Enhance and maintain SIEM/SOC operations, including rule tuning, process development, and SOC setup (if needed).</p><p>
</p><p><b>Required Expertise:</b></p><p>
Strong hands-on experience in SIEM/SOC design and operations</p><p>
Cybersecurity governance and risk management</p><p>
Security architecture reviews</p><p>
Ability to engage effectively with IT/Security teams</p><p>
Experience in banking, finance, telco, or enterprise environments</p><p>
15&ndash;20 years of practical cybersecurity experience</p><p></p><p><b><br>
1 Cybersecurity Architecture Assessment &amp; Strategy</b></p><ul><li>
Lead a full end-to-end evaluation of the organization&rsquo;s existing SIEM architecture, SOC operations, and IR capabilities.</li><li>
Assess effectiveness across people, processes, and technology, identifying strengths, gaps, and opportunities for enhancement.</li><li>
Benchmark current cybersecurity maturity against industry standards (e.g., NIST CSF, ISO 27001, MITRE ATT&amp;CK).</li><li>
Develop a prioritized roadmap for SIEM/SOC/IR optimization and modernization.</li></ul><p><b>
2. SIEM Optimization &amp; Enhancement</b></p><ul><li>
Redesign SIEM architecture and data ingestion strategy to improve visibility, performance, and event fidelity.</li><li>
Enhance log parsing, normalization, enrichment, and ingestion from critical sources (cloud, endpoints, identity, OT/ICS, network, and security tools).</li><li>
Refine correlation logic, detection use cases, and alert tuning methodologies to reduce false positives and increase detection accuracy.</li><li>
Implement advanced detection techniques mapped to MITRE ATT&amp;CK, including custom rules, dashboards, and analytics.</li><li>
Establish SIEM governance processes, rule-tuning standards, and performance optimization practices.</li></ul><p><b>
3. SOC Maturity Improvement &amp; Operational Excellence</b></p><ul><li>
Conduct a deep review of SOC workflows, tiered responsibilities, shift coverage, and tooling integration.</li><li>
Redesign triage and escalation workflows to improve response efficiency and adherence to SLAs.</li><li>
Enhance tool interoperability (SIEM, SOAR, ticketing, TIP, EDR) to streamline end-to-end detection and response.</li><li>
Develop or refine IR playbooks for priority incident types (phishing, malware, insider threat, cloud compromise, etc.).</li><li>
Lead SOC modernization initiatives including automation, orchestration, and analyst enablement.</li></ul><p><b>
4. Incident Response Uplift</b></p><ul><li>
Evaluate and enhance incident response strategies, containment approaches, escalation paths, and communication flows.</li><li>
Conduct tabletop exercises, technical simulations, and scenario-based training to improve analyst readiness.</li><li>
Improve coordination across IT, security, compliance, and risk teams during incident handling.</li><li>
Advise leadership on best practices, emerging threats, and enterprise IR preparedness.</li></ul><p><b>
5. Implementation Leadership &amp; Delivery</b></p><ul><li>
Drive the successful implementation of all improvements identified during the assessment phase.</li><li>
Manage cross-functional workstreams, ensuring timely delivery of SIEM/SOC enhancements.</li><li>
Ensure all changes align with cybersecurity best practices, compliance requirements, and business objectives.</li><li>
Track progress using KPIs such as MTTD, MTTR, correlation accuracy, false-positive rates, and detection coverage.</li></ul></div><p></p>

Cybersecurity consultant

Mackenzie Jones Middle East

<div>
 <p>
  We&rsquo;re hiring an
  <strong>
   Technology Risk Analyst
  </strong>
  in Dubai to support our Head of IT and CISO organization in delivering security risk assurance, compliance readiness, and governance across EMEA. In this role, you&rsquo;ll assist with risk and issue management, maintain and enhance cyber security frameworks, track audit and regulatory actions, and prepare reports and dashboards for senior stakeholders. The ideal candidate has experience with
  <strong>
   Cyber Security frameworks (NIST, ISO 27001, COBIT, ITIL)
  </strong>
  ,
  <strong>
   DIFC/QFCRA regulations
  </strong>
  , strong stakeholder management skills, and expertise in policy design, business analysis, and Microsoft Suite.
 </p>
</div>


Technology Risk Analyst

Crypto.com

<div>
 <p>
  As a member of the ETMSA team at Crypto.com, you will be integral to responding to and managing cybersecurity threats and incidents throughout their lifecycle &ndash; from Preparation to Identification, Containment, Eradication, Recovery, and Lessons Learned &ndash; collaborating with a global team of incident responders.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  You will apply your comprehensive skills in cyber defense, digital forensics, log analysis, and intrusion analysis to address security incidents across our endpoints, network, and cloud infrastructure. In this role, you will be responsible for prevention, detection, response, and remediation activities, ensuring that information assets and technologies are adequately protected by leveraging various technologies such as Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and more.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  You will also leverage your collaboration and communication skills to work effectively with all relevant stakeholders in multicultural and global environments.
 </p>
 <p>
  -
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Report to Director to facilitate all phases in the incident response lifecycle
 </p>
 <p>
  - Be involved in various incident prevention projects to improve Security posture
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Preparation
 </p>
 <p>
  - Understand different regulatory and compliance requirements like critical time to report, escalation flows, etc.
 </p>
 <p>
  - Take part in self-assessment exercises like Tabletop Exercises, Attack Simulations, Red/Purple Team exercises to make sure the incident response process is working smoothly
 </p>
 <p>
  - Develop incident response runbooks, playbooks and SOPs with reference to different regulatory requirements
 </p>
 <p>
  - Evaluate the incident response readiness of different layers - people, process, technology
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Detection &amp; Analysis
 </p>
 <p>
  - Respond to the cyber security incidents escalated from various channels including the 24/7 SOC team.
 </p>
 <p>
  - Respond to cyber security incidents in compliance with the local authority / regulatory requirements.
 </p>
 <p>
  &nbsp;- Assess the risk, impact and scope of the identified security threats
 </p>
 <p>
  - Perform deep-dive incident analysis of various data sources by analysing and investigating security related logs against medium-term threats and IOCs
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Containment, Eradication and Recovery
 </p>
 <p>
  - Communicate with the stakeholders and provide guidance, recommendations to contain and eradicate the security incident
 </p>
 <p>
  - Participate in root cause analysis using forensic and other custom tools to identify any sources of compromise and/or malicious activities taking place.
 </p>
 <p>
  - Document and present investigative findings for high profile events and other incidents of interest.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Post incident activities
 </p>
 <p>
  - Provide lessons learnt meeting to the stakeholders
 </p>
 <p>
  - Lead and keep track on the follow-up activities
 </p>
 <p>
  - Document the incident in the case management system and provide incident reports
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  Always ready to jump in, in the event of security incidents.
 </p>
 <p>
  <p>
   <br/>
  </p>
  <strong>
   Requirements
  </strong>
  <ul>
   <li>
    At least 2 years experience in the Cyber Security industry
   </li>
   <li>
    Strong technical and analytical skills
   </li>
   <li>
    Familiar with the cyber security incident response process
   </li>
   <li>
    Familiarity with AI tools and their application in automating security tasks and processes
   </li>
   <li>
    Hands-on experience on performing incident response activities
   </li>
   <li>
    Have scripting experience like Bash, PowerShell, Python, Go, etc, and the ability to use these skills to aid in responding to incidents involving Windows, Linux, macOS, as well as cloud environment
   </li>
   <li>
    Have knowledge of cybersecurity tools and software like NGFW, EDR, IDS/IPS, EDR, DLP, SIEM, other log management platforms, etc
   </li>
   <li>
    Be familiar with the MITRE ATT&amp;CK Framework and/or Cyber Kill Chain
   </li>
   <li>
    Be passionate on exploring new technologies and having creative initiative to boost the team capabilities
   </li>
   <li>
    Holders of security related certifications is a plus (e.g.Azure, AWS, CISSP, GCIH, GCIA, GCFA, GNFA, GREM, or other equivalent)
   </li>
   <li>
    Awareness of regulatory and compliance requirements like GDPR, MAS, PSD2 etc is a plus
    <br/>
    <br/>
   </li>
  </ul>
  <p>
   <br/>
  </p>
  <strong>
   Preferably
  </strong>
  <ul>
   <li>
    Fast learner with can do attitude and ready to get the hands dirty
   </li>
   <li>
    A strong team player who can collaborate with compassion
   </li>
   <li>
    Passionate to learn and willing to put in the extra effort
   </li>
   <li>
    Understand the concept of ownership and accountability coupled with sense of urgency and prioritisation
   </li>
   <li>
    Confidence in handling incidents and managing relevant senior and technical stakeholders
   </li>
   <li>
    Possess business acumen/mindset (not only technical) when making critical decisions
    <br/>
    <br/>
    <br/>
   </li>
  </ul>
 </p>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
 </p>
</div>


Incident Response Engineer

Explore 287+ Cybersecurity analyst in Dubai this December. Find roles across top companies and apply now to boost your career.