analyst

business intelligence analyst Jobs in Dubai

business intelligence analyst

data security analyst

erp specialist

revenue analyst

incident response analyst

Dicetek

A leading IT services company in the UAE is seeking an experienced L2 SOC Analyst to enhance its security operations. The ideal candidate must possess in-depth knowledge of cloud security, incident response, and a variety of security management tools. Responsibilities include managing security incidents, analyzing logs, and ensuring robust network protection. This contract position offers a dynamic work environment with opportunities for professional growth.

L2 SOC Analyst: Cloud Security & Threat Intel (Contract)

<div>
 
 
 About Us
 
 
 
 HWG &ndash; Dubai Branch is part of a global cybersecurity group with over 200 professionals protecting organizations across Europe and the Middle East. We specialize in advanced cybersecurity services, from threat detection and incident response to compliance, governance, and SOC.
 
 
 With more than 15 years of experience, our mission is simple: help businesses stay secure, resilient, and ahead of evolving threats.
 
 
 
 
 
 
 Job Summary
 
 
 
 We are looking for a skilled and motivated SOC Tier 1 Analyst to join our Global cybersecurity team. The successful candidate will play a crucial role in monitoring, analysing, and responding to cybersecurity events, as well as supporting client relationships. This position requires solid technical knowledge, a proactive mindset, and strong teamwork skills.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 &middot; Perform threat monitoring and initial incident management
 
 
 &middot; Analyse cybersecurity events using monitoring systems (e.g., SIEM platforms such as QRadar, Splunk, Sentinel)
 
 
 &middot; Escalate and support the in-depth analysis of critical issues to Tier 2
 
 
 &middot; Collaborate with peers to identify and reduce false positives
 
 
 &middot; Support the definition of new detection use cases and response playbooks
 
 
 &middot; Coordinate and respond to security incidents under the guidance of senior analysts
 
 
 &middot; Manage communications with clients during security incidents
 
 
 &middot; Contribute to the preparation and enrichment of recurring reports (weekly, monthly, annual)
 
 
 &middot; Participate in client meetings to discuss findings and reports
 
 
 &middot; Work on shift as part of SOC operations.
 
 
 
 
 
 
 Required Hard Skills:
 
 
 
 &middot; Strong knowledge of IT and cybersecurity fundamentals
 
 
 &middot; Solid understanding of major operating systems
 
 
 &middot; Strong understanding of computer networks and firewalls
 
 
 &middot; Hands-on experience with monitoring tools (QRadar, Splunk, Sentinel, etc.)
 
 
 &middot; Good knowledge of email security (cloud and on-premise)
 
 
 &middot; Proficiency in Microsoft Office Suite
 
 
 &middot; Familiarity with ITSM tools
 
 
 . Availability to work in rotational shifts including night and weekends
 
 
 
 
 
 
 Required Soft Skills:
 
 
 
 &middot; Residence in UAE
 
 
 &middot; Goal-oriented and proactive
 
 
 &middot; Excellent interpersonal and teamwork abilities
 
 
 &middot; Flexibility and composure under stressful situations
 
 
 &middot; Strong attention to detail, analytical thinking, and problem-solving skills
 
 
 &middot; Excellent communication skills in English (Arabic is a strong advantage)
 
 
 &middot; Strong coordination skills across multicultural, cross-functional teams
 
 
 
 
 
 
 Why Join Us?
 
 
 <ul>
 <li>
 Opportunity to work in a growing cybersecurity environment
 </li>
 <li>
 Collaborative and dynamic team culture
 </li>
 <li>
 Real impact on security operations and client success
 </li>
 </ul>
 
 Be part of a high-impact cybersecurity team in one of the world&rsquo;s most dynamic digital regions.
 
 
 Apply now and help secure the future of our clients across the GCC, HereWeGo!
 
</div>

SOC Tier 1 Analyst

Crypto.com

<div>
 
 As a member of the ETMSA team at Crypto.com, you will be integral to responding to and managing cybersecurity threats and incidents throughout their lifecycle &ndash; from Preparation to Identification, Containment, Eradication, Recovery, and Lessons Learned &ndash; collaborating with a global team of incident responders.
 
 
 
 
 
 
 
 
 You will apply your comprehensive skills in cyber defense, digital forensics, log analysis, and intrusion analysis to address security incidents across our endpoints, network, and cloud infrastructure. In this role, you will be responsible for prevention, detection, response, and remediation activities, ensuring that information assets and technologies are adequately protected by leveraging various technologies such as Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and more.
 
 
 
 
 
 
 
 
 You will also leverage your collaboration and communication skills to work effectively with all relevant stakeholders in multicultural and global environments.
 
 
 -
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 
 
 
 
 - Report to Director to facilitate all phases in the incident response lifecycle
 
 
 - Be involved in various incident prevention projects to improve Security posture
 
 
 
 
 
 
 
 
 Preparation
 
 
 - Understand different regulatory and compliance requirements like critical time to report, escalation flows, etc.
 
 
 - Take part in self-assessment exercises like Tabletop Exercises, Attack Simulations, Red/Purple Team exercises to make sure the incident response process is working smoothly
 
 
 - Develop incident response runbooks, playbooks and SOPs with reference to different regulatory requirements
 
 
 - Evaluate the incident response readiness of different layers - people, process, technology
 
 
 
 
 
 
 
 
 Detection &amp; Analysis
 
 
 - Respond to the cyber security incidents escalated from various channels including the 24/7 SOC team.
 
 
 - Respond to cyber security incidents in compliance with the local authority / regulatory requirements.
 
 
 &nbsp;- Assess the risk, impact and scope of the identified security threats
 
 
 - Perform deep-dive incident analysis of various data sources by analysing and investigating security related logs against medium-term threats and IOCs
 
 
 
 
 
 
 
 
 Containment, Eradication and Recovery
 
 
 - Communicate with the stakeholders and provide guidance, recommendations to contain and eradicate the security incident
 
 
 - Participate in root cause analysis using forensic and other custom tools to identify any sources of compromise and/or malicious activities taking place.
 
 
 - Document and present investigative findings for high profile events and other incidents of interest.
 
 
 
 
 
 
 
 
 Post incident activities
 
 
 - Provide lessons learnt meeting to the stakeholders
 
 
 - Lead and keep track on the follow-up activities
 
 
 - Document the incident in the case management system and provide incident reports
 
 
 
 
 
 
 
 
 Always ready to jump in, in the event of security incidents.
 
 
 
 
 
 
 Requirements
 
 <ul>
 <li>
 At least 2 years experience in the Cyber Security industry
 </li>
 <li>
 Strong technical and analytical skills
 </li>
 <li>
 Familiar with the cyber security incident response process
 </li>
 <li>
 Familiarity with AI tools and their application in automating security tasks and processes
 </li>
 <li>
 Hands-on experience on performing incident response activities
 </li>
 <li>
 Have scripting experience like Bash, PowerShell, Python, Go, etc, and the ability to use these skills to aid in responding to incidents involving Windows, Linux, macOS, as well as cloud environment
 </li>
 <li>
 Have knowledge of cybersecurity tools and software like NGFW, EDR, IDS/IPS, EDR, DLP, SIEM, other log management platforms, etc
 </li>
 <li>
 Be familiar with the MITRE ATT&amp;CK Framework and/or Cyber Kill Chain
 </li>
 <li>
 Be passionate on exploring new technologies and having creative initiative to boost the team capabilities
 </li>
 <li>
 Holders of security related certifications is a plus (e.g.Azure, AWS, CISSP, GCIH, GCIA, GCFA, GNFA, GREM, or other equivalent)
 </li>
 <li>
 Awareness of regulatory and compliance requirements like GDPR, MAS, PSD2 etc is a plus
 
 
 </li>
 </ul>
 
 
 
 
 Preferably
 
 <ul>
 <li>
 Fast learner with can do attitude and ready to get the hands dirty
 </li>
 <li>
 A strong team player who can collaborate with compassion
 </li>
 <li>
 Passionate to learn and willing to put in the extra effort
 </li>
 <li>
 Understand the concept of ownership and accountability coupled with sense of urgency and prioritisation
 </li>
 <li>
 Confidence in handling incidents and managing relevant senior and technical stakeholders
 </li>
 <li>
 Possess business acumen/mindset (not only technical) when making critical decisions
 
 
 
 </li>
 </ul>
 
 
 
 
 
 
 We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
 
</div>

Incident Response Engineer

DICETEK LLC

<ul><li>Resource should have in-depth knowledge and experience in cloud security</li><li>Resource must have in-depth knowledge in Incident Response Process &amp; Procedure</li><li>Resource must be well experienced in Security Event Log Analysis</li><li>Resource must have Network Traffic Analysis skill</li><li>Resource must have worked in major Antivirus/Malware solutions</li><li>Resource must have experience in Intrusion Detection/Prevention systems</li><li>Resource should have experience in administering in Security Incident and Event Management Systems (SIEM) tool</li><li>Resource should have rich knowledge in Firewalls</li><li>Resource must have Advanced Persistent Threat handling capability</li><li>Resource must have experience in Web Application Firewall configurations</li><li>Resource should have good experience in Penetration testing tools and techniques</li><li>Resource should aware about vulnerability management and patching</li><li>Resource should have extensive knowledge in Threat intelligence</li></ul>

SOC Analyst

Emirates Investment Bank pjsc

<div>
 
 
 Job Purpose:
 
 
 
 The Senior Associate &ndash; Security Operations Centre (SOC) will play a pivotal role within the Information Security team, serving as a primary responder to cybersecurity threats targeting the bank&rsquo;s critical systems and digital infrastructure across both cloud environments and on-premises. This position is responsible for the continuous monitoring, analysis, and response to security incidents, while ensuring the confidentiality, integrity, and availability of critical systems.
 
 
 The role also involves close collaboration with cross-functional teams to enhance the bank&rsquo;s security operations capabilities and maintain a robust cybersecurity posture.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Monitor, analyze, and respond to security events using MXDR SIEM, EDR, and DLP tools.
 </li>
 <li>
 Lead end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident reviews.
 </li>
 <li>
 Correlate internal telemetry with threat intelligence to identify and mitigate emerging risks.
 </li>
 <li>
 Conduct proactive threat hunting and anomaly detection across hybrid environments (on-prem and cloud).
 </li>
 <li>
 Manage and optimize SOC dashboards, reports, and KPIs for operational visibility and executive reporting.
 </li>
 <li>
 Provide oversight and monitoring of premise and cloud environments (Azure), ensuring alignment with security best practices.
 </li>
 <li>
 Collaborate with IT, Desktop, and Application teams to ensure the critical systems and application logs (On premise and Cloud) are sent to the SIEM to monitor.
 </li>
 <li>
 Support regulatory compliance assessments (UAE IA, SWIFT, PCI-DSS) through gap assessments and remediation tracking.
 </li>
 <li>
 Perform vulnerability and compliance baseline scans (Qualys)and coordinate with IT Operation on patching activities.
 </li>
 <li>
 Continuously improve SOC processes, playbooks, and automation workflows to enhance efficiency and response times.
 </li>
 <li>
 Conduct user access reviews, Firewall/IPS rule/policy checks, and security device configuration audits.
 </li>
 <li>
 Develop and monitor data leakage prevention and data classification solutions, escalate data leakage alerts to the manager, and ensure banks data classified, monitored and protected in accordance with the data classification policy.
 </li>
 <li>
 Plan and deliver security awareness programs, phishing simulations, and targeted information security training.
 </li>
 <li>
 Support in creating, reviewing, and updating security policies, guidelines, and procedures.
 </li>
 <li>
 Review alerts from brand protection solution and coordinate with the vendor to mitigate such alerts.
 </li>
 <li>
 Support in conducting risk assessments, user access review for critical applications, Infrastructure, and cloud environment and third parties who offer critical services to the bank.
 </li>
 <li>
 Mentor Trainee and contribute to the overall maturity and capability uplift of the SOC.
 </li>
 </ul>
 
 
 
 
 
 Qualification &amp; Certification:
 
 
 
 
 
 Education &amp; Technical Proficiency:
 
 
 
 <ul>
 <li>
 Master&rsquo;s or bachelor&rsquo;s degree in computer engineering, Information Security, or a related field from recognized University.
 </li>
 <li>
 Working experience in different Information security / IT Security domains.
 </li>
 <li>
 Working knowledge or familiarity of Splunk, Azure Sentinel, Forcepoint Proxy, Azure Security.
 </li>
 <li>
 Hands on experience in DLP and Data Classification Solutions (e.g., Forcepoint, Microsoft Purview).
 </li>
 <li>
 Solid understanding of cloud security (Microsoft Azure) monitoring and compliance standards.
 </li>
 <li>
 Vulnerability and Compliance management tools (Qualys) and log aggregation platforms.
 </li>
 <li>
 Familiarity with GRC or risk management platforms (e.g., ServiceNow GRC, MetricStream) is an advantage.
 </li>
 <li>
 Familiarity with automation scripting (e.g., Python) is a plus.
 </li>
 </ul>
 
 
 
 
 
 
 Certifications:
 
 
 
 <ul>
 <li>
 Information Security Certifications: Azure Security Engineer (AZ-500), CISA, Security+, CEH, GCIA, or equivalent industry certifications. (any two certifications are must)
 </li>
 <li>
 Professional certifications such as CCSK, CISM, CRISC (good to have).
 </li>
 </ul>
 
 
 
 
 
 Experience &amp; Skills:
 
 
 
 
 
 Experience:
 
 
 
 <ul>
 <li>
 6-7 years of progressive experience in cybersecurity, with at least 3-4 years in a banking or financial services SOC environment.
 </li>
 </ul>
 
 
 
 Skills:
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving abilities with and report writing skills.
 </li>
 <li>
 Excellent communication skills, capable of translating complex technical issues for non-technical stakeholders.
 </li>
 <li>
 High ownership mindset with the ability to perform under pressure in a challenging environment.
 </li>
 <li>
 Effective stakeholder management and a collaborative team player.
 </li>
 <li>
 Passion for continuous learning and staying current with the evolving threat landscape.
 </li>
 </ul>
</div>

Senior Associate – Security Operation Centre

<div>We are looking for highly skilled cybersecurity consultants with extensive hands-on experience in SOC design, SIEM engineering, Incident Response, Threat Detection, and building cybersecurity maturity. Consultants should be proficient in building SOCs from scratch, developing SIEM use-cases, MITRE mapping, IR playbooks, and defining cybersecurity strategy.
Key Responsibilities:
Lead technical cybersecurity discussions with IT, vendors, and stakeholders.
Ensure alignment with regulatory requirements and security best practices.
Enhance and maintain SIEM/SOC operations, including rule tuning, process development, and SOC setup (if needed).
Required Expertise:
Strong hands-on experience in SIEM/SOC design and operations
Cybersecurity governance and risk management
Security architecture reviews
Ability to engage effectively with IT/Security teams
Experience in banking, finance, telco, or enterprise environments
15&ndash;20 years of practical cybersecurity experience 
1 Cybersecurity Architecture Assessment &amp; Strategy<ul><li>
Lead a full end-to-end evaluation of the organization&rsquo;s existing SIEM architecture, SOC operations, and IR capabilities.</li><li>
Assess effectiveness across people, processes, and technology, identifying strengths, gaps, and opportunities for enhancement.</li><li>
Benchmark current cybersecurity maturity against industry standards (e.g., NIST CSF, ISO 27001, MITRE ATT&amp;CK).</li><li>
Develop a prioritized roadmap for SIEM/SOC/IR optimization and modernization.</li></ul>
2. SIEM Optimization &amp; Enhancement<ul><li>
Redesign SIEM architecture and data ingestion strategy to improve visibility, performance, and event fidelity.</li><li>
Enhance log parsing, normalization, enrichment, and ingestion from critical sources (cloud, endpoints, identity, OT/ICS, network, and security tools).</li><li>
Refine correlation logic, detection use cases, and alert tuning methodologies to reduce false positives and increase detection accuracy.</li><li>
Implement advanced detection techniques mapped to MITRE ATT&amp;CK, including custom rules, dashboards, and analytics.</li><li>
Establish SIEM governance processes, rule-tuning standards, and performance optimization practices.</li></ul>
3. SOC Maturity Improvement &amp; Operational Excellence<ul><li>
Conduct a deep review of SOC workflows, tiered responsibilities, shift coverage, and tooling integration.</li><li>
Redesign triage and escalation workflows to improve response efficiency and adherence to SLAs.</li><li>
Enhance tool interoperability (SIEM, SOAR, ticketing, TIP, EDR) to streamline end-to-end detection and response.</li><li>
Develop or refine IR playbooks for priority incident types (phishing, malware, insider threat, cloud compromise, etc.).</li><li>
Lead SOC modernization initiatives including automation, orchestration, and analyst enablement.</li></ul>
4. Incident Response Uplift<ul><li>
Evaluate and enhance incident response strategies, containment approaches, escalation paths, and communication flows.</li><li>
Conduct tabletop exercises, technical simulations, and scenario-based training to improve analyst readiness.</li><li>
Improve coordination across IT, security, compliance, and risk teams during incident handling.</li><li>
Advise leadership on best practices, emerging threats, and enterprise IR preparedness.</li></ul>
5. Implementation Leadership &amp; Delivery<ul><li>
Drive the successful implementation of all improvements identified during the assessment phase.</li><li>
Manage cross-functional workstreams, ensuring timely delivery of SIEM/SOC enhancements.</li><li>
Ensure all changes align with cybersecurity best practices, compliance requirements, and business objectives.</li><li>
Track progress using KPIs such as MTTD, MTTR, correlation accuracy, false-positive rates, and detection coverage.</li></ul></div>

Cybersecurity consultant

Explore 517+ Incident response analyst in Dubai this December. Find roles across top companies and apply now to boost your career.

517 incident response analyst jobs IN Dubai

L2 SOC Analyst: Cloud Security & Threat Intel (Contract)

SOC Tier 1 Analyst

Incident Response Engineer

SOC Analyst

SOC Analyst

Senior Associate – Security Operation Centre

Cybersecurity consultant