business analyst

product analyst

audit associate

business intelligence analyst Jobs in Dubai

business intelligence analyst

it specialist

incident response analyst

Paramount Assure

<div> <p>L2 SOC Analyst   </p> <p> <br> </p> <p>Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) </p> <p> <br> </p> <p> <strong>Role Overview</strong>: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. </p> <p> <br> </p> <p> <strong>Location</strong>: Onsite </p> <p> <br> </p> <p> <strong>Key Responsibilities</strong>: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. </p> <p> <br> </p> <p> <strong>Requirements</strong>: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</p></div>

SOC L2

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Dicetek

A leading IT services company in the UAE is seeking an experienced L2 SOC Analyst to enhance its security operations. The ideal candidate must possess in-depth knowledge of cloud security, incident response, and a variety of security management tools. Responsibilities include managing security incidents, analyzing logs, and ensuring robust network protection. This contract position offers a dynamic work environment with opportunities for professional growth.

L2 SOC Analyst: Cloud Security & Threat Intel (Contract)

DICETEK LLC

<ul><li>Resource should have in-depth knowledge and experience in cloud security</li><li>Resource must have in-depth knowledge in Incident Response Process &amp; Procedure</li><li>Resource must be well experienced in Security Event Log Analysis</li><li>Resource must have Network Traffic Analysis skill</li><li>Resource must have worked in major Antivirus/Malware solutions</li><li>Resource must have experience in Intrusion Detection/Prevention systems</li><li>Resource should have experience in administering in Security Incident and Event Management Systems (SIEM) tool</li><li>Resource should have rich knowledge in Firewalls</li><li>Resource must have Advanced Persistent Threat handling capability</li><li>Resource must have experience in Web Application Firewall configurations</li><li>Resource should have good experience in Penetration testing tools and techniques</li><li>Resource should aware about vulnerability management and patching</li><li>Resource should have extensive knowledge in Threat intelligence</li></ul>

SOC Analyst

Client of Involved Solutions

<p>You will be responsible for protecting the organisation's infrastructure and data from evolving cyber threats. The role will cover threat detection, incident response, and implementation of security controls across cloud and on-premise environments. You will also work closely with IT operations and compliance to ensure alignment with best practices and regulatory requirements.</p>
<p><b>Skills:</b></p>
<ul>
 <li>Strong hands-on experience with firewalls, IDS/IPS, and endpoint protection platforms (e.g., Palo Alto, Fortinet, CrowdStrike)</li>
 <li>Skilled in managing and tuning SIEM solutions (Splunk, Microsoft Sentinel, or similar)</li>
 <li>Expertise in threat detection, vulnerability management, and incident response</li>
 <li>Experience implementing cloud security controls across Azure and/or AWS</li>
 <li>Proficiency with security hardening, identity and access management (IAM), and zero-trust architectures</li>
 <li>Knowledge of encryption standards, PKI, and network protocols</li>
 <li>Familiarity with compliance frameworks such as ISO 27001, NIST, or PCI DSS</li>
</ul>

Cyber Security Engineer

Binance

<div>
 <div>
  <b>Responsibilities</b>
  <ul>
   <li>Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.</li>
   <li>Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).</li>
   <li>Configure DLP policies to prevent data exfiltration while minimizing false positives.</li>
   <li>Monitor, analyze, and tune alerts and incidents for continuous improvement.</li>
   <li>Lead investigations of DLP incidents and insider threats,</li>
   <li>Conduct threat hunting and forensic analysis of data exfiltration attempts.</li>
   <li>Integrate DLP monitoring into broader SOC workflows and incident response playbooks.</li>
   <li>Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).</li>
   <li>Develop automation scripts, APIs, regexes and integrations to enhance detection and response.</li>
   <li>Explore AI/LLM-driven methods for anomaly detection and response efficiency.</li>
   <li>Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).</li>
   <li>Support audits and regulatory reviews related to data protection.</li>
   <li>Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.</li>
  </ul>
 </div>
</div>

DLP & Incident Response Engineer

Bayut.com

<p><br></p> <p> <strong>In this role you will:</strong> </p> <ul> <li>Collaborate with internal teams to implement security controls, address vulnerabilities and improvesecurity practices in the relevant platforms &amp; services.</li> <li>Conduct penetration testing on web applications, mobile applications, APIs, networks, and system and coordinate the pen-testing projects executed by external partners.</li> <li>Ensure identified vulnerabilities, threats and risks are captured and processed in line with our risk management policy and procedure.</li> <li>Take part in security incident resolution and contribute to the development, maintenance and assessment of the Incident Response Plan s effectiveness.</li> <li>Monitor the internal alerting systems and drive the events to closure.</li> <li>Participate in regular internal and external audits (including periodic user access reviews) on critical systems and ensure audit findings are remediated in the agreed timeframe.</li> <li>Reduce the information security knowledge gap within the technical teams by contributing to the creation of educational materials and awareness campaigns.</li> <li>Implement and regularly review the internal security policies and controls across all business-critical services.</li> </ul> <p> </p>

Application Security Engineer

Explore 821+ Incident response analyst in Dubai this November. Find roles across top companies and apply now to boost your career.