business analyst

assistant resident engineer Jobs in Dubai

assistant resident engineer

cx analyst

it specialist

ai specialist

incident response analyst

Paramount Assure

<div> <p>L2 SOC Analyst   </p> <p> <br> </p> <p>Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) </p> <p> <br> </p> <p> <strong>Role Overview</strong>: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. </p> <p> <br> </p> <p> <strong>Location</strong>: Onsite </p> <p> <br> </p> <p> <strong>Key Responsibilities</strong>: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. </p> <p> <br> </p> <p> <strong>Requirements</strong>: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</p></div>

SOC L2

help AG

<div><p>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist (U.A.E National) who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Lead incident response engagements in unknown environments until all threats are remediated.</p></li><li><p>
Develop custom incident response plans tied to specific environments and customer situations.</p></li><li><p>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</p></li><li><p>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</p></li><li><p>
Reverse engineer malicious software and develop signatures and indicators of compromise.</p></li><li><p>
Actively develop incident response tools, scripts, and various detection content.</p></li><li><p>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</p></li><li><p>
Articulate and execute common Incident Response methods (e.g. SANS).</p></li><li><p>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</p></li><li><p>
Work on-site as required with clients during Live Security Incidents.</p></li><li><p>
Maintain a high degree of awareness of the current threat landscape.</p></li><li><p>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</p></li><li><p>
Create and present customer reports to ensure quality, accuracy and value to the client.</p></li><li><p>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</p></li><li><p>
Perform other essential duties as assigned.</p></li></ul><p></p><p><b><br>
Qualifications &amp; Skills:</b></p><p></p><ul><li><p>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</p></li><li><p>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</p></li><li><p>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</p></li><li><p>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</p></li><li><p>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</p></li><li><p>
Should have <b>at least</b> one of the below <b>ACTIVE </b>certifications as a mandatory requirement:</p></li></ul><p>
CREST Certified Registered Intrusion Analyst (CRIA)<br>
GIAC Cloud Forensics Responder (GCFR)<br>
GIAC Certified Forensic Analyst (GCFA)</p><p>
CREST Certified Host Intrusion Analyst (CC-HIA)<br>
CREST Certified Network Intrusion Analyst (CC-NIA)</p><p>
CREST Certified Incident Manager (CC-IM)</p><p>
CREST Certified Threat Intelligence Manager (CC-TIM)<br>
GIAC Reverse Engineering Malware (GREM)</p><ul><li><p>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</p></li><li><p>
Deep TCP/IP knowledge, networking and security product experience.</p></li></ul><ul><li><p>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</p></li><li><p>
Rapid development in scripting languages: Python/PowerShell /Bash.</p></li><li><p>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</p></li><li><p>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</p></li><li><p>
Demonstrable experience in analysing and interpreting system, security and application logs.</p></li><li><p>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</p></li><li><p>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</p></li><li><p>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</p></li><li><p>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</p></li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li><p><br>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/Hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b><br>
About Us:</b></p><p></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Client of Involved Solutions

<p>You will be responsible for protecting the organisation's infrastructure and data from evolving cyber threats. The role will cover threat detection, incident response, and implementation of security controls across cloud and on-premise environments. You will also work closely with IT operations and compliance to ensure alignment with best practices and regulatory requirements.</p>
<p><b>Skills:</b></p>
<ul>
 <li>Strong hands-on experience with firewalls, IDS/IPS, and endpoint protection platforms (e.g., Palo Alto, Fortinet, CrowdStrike)</li>
 <li>Skilled in managing and tuning SIEM solutions (Splunk, Microsoft Sentinel, or similar)</li>
 <li>Expertise in threat detection, vulnerability management, and incident response</li>
 <li>Experience implementing cloud security controls across Azure and/or AWS</li>
 <li>Proficiency with security hardening, identity and access management (IAM), and zero-trust architectures</li>
 <li>Knowledge of encryption standards, PKI, and network protocols</li>
 <li>Familiarity with compliance frameworks such as ISO 27001, NIST, or PCI DSS</li>
</ul>

Cyber Security Engineer

Binance

<div>
 <div>
  <b>Responsibilities</b>
  <ul>
   <li>Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.</li>
   <li>Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).</li>
   <li>Configure DLP policies to prevent data exfiltration while minimizing false positives.</li>
   <li>Monitor, analyze, and tune alerts and incidents for continuous improvement.</li>
   <li>Lead investigations of DLP incidents and insider threats,</li>
   <li>Conduct threat hunting and forensic analysis of data exfiltration attempts.</li>
   <li>Integrate DLP monitoring into broader SOC workflows and incident response playbooks.</li>
   <li>Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).</li>
   <li>Develop automation scripts, APIs, regexes and integrations to enhance detection and response.</li>
   <li>Explore AI/LLM-driven methods for anomaly detection and response efficiency.</li>
   <li>Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).</li>
   <li>Support audits and regulatory reviews related to data protection.</li>
   <li>Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.</li>
  </ul>
 </div>
</div>

DLP & Incident Response Engineer

Bayut.com

<p><br></p> <p> <strong>In this role you will:</strong> </p> <ul> <li>Collaborate with internal teams to implement security controls, address vulnerabilities and improvesecurity practices in the relevant platforms &amp; services.</li> <li>Conduct penetration testing on web applications, mobile applications, APIs, networks, and system and coordinate the pen-testing projects executed by external partners.</li> <li>Ensure identified vulnerabilities, threats and risks are captured and processed in line with our risk management policy and procedure.</li> <li>Take part in security incident resolution and contribute to the development, maintenance and assessment of the Incident Response Plan s effectiveness.</li> <li>Monitor the internal alerting systems and drive the events to closure.</li> <li>Participate in regular internal and external audits (including periodic user access reviews) on critical systems and ensure audit findings are remediated in the agreed timeframe.</li> <li>Reduce the information security knowledge gap within the technical teams by contributing to the creation of educational materials and awareness campaigns.</li> <li>Implement and regularly review the internal security policies and controls across all business-critical services.</li> </ul> <p> </p>

Application Security Engineer

<b>Role and Responsibilities 
 
 </b><div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a DFIR consultant in DTS Solution supporting our 800-HACKED program<br> </li>
 <li>
<i> </i> 
 Work as a consultant for many Incident Retainer Program<br> </li>
 <li>
<i> </i> 
 Cyber breach investigations including forensic and malware analysis. Identifies network computer intrusion evidence and perpetrators.<br> </li>
 <li>
<i> </i> 
 Strong understanding on threat hunting methodologies.<br> </li>
 <li>
<i> </i> 
 Strong experience in post-compromise assessment.<br> </li>
 <li>
<i> </i> 
 Ability to perform detailed forensics investigations;<br> </li>
 <li>
<i> </i> 
 Knowledge on DFIR tools   Autospy, Encase, Access Data, FTK+, IDA etc.<br> </li>
 <li>
<i> </i> 
 Examines and performs comprehensive technical analysis of computer-related evidence and information stored on a device(s) during the conduct of an investigation or litigation.<br> </li>
 <li>
<i> </i> 
 Proactively advise teams/hunt for and research potential malicious activity and incidents across multiple platforms using advanced threat network and host-based tools.<br> </li>
 <li>
<i> </i> 
 Use both internal and external threat intelligence to build indicators of compromise into monitoring tools, can integrate these tools with one another to provide data enrichment.<br> </li>
 <li>
<i> </i> 
 Use strong TCP/IP networking skills to perform network analysis to isolate and diagnose potential threats and anomalous network behavior.<br> </li>
 <li>
<i> </i> 
 Ensures chain of custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports.<br> </li>
 <li>
<i> </i> 
 Report common and repeated problems (trend analysis) to management and propose process and technical improvements.<br> </li>
 <li>
<i> </i> 
 Provide resolution plans for system and network issues.<br> </li>
 <li>
<i> </i> 
 Provide support in the detection, response, mitigation, and reporting of real or potential cyber threats to the environment and assist in the automation of the processes.<br> </li>
 <li>
<i> </i> 
 Provides oral and written communication to staff personnel concerning findings of fact, results of examination(s), and legal declarations, and testify in court as to the procedures and methodology used to recover and identify relevant evidence.<br> </li>
 <li>
<i> </i> 
 Ability to write Incident Response Reports in accordance to international standards.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 6+ years of experience of network/security and analyzing digital evidence and investigate computer security incidents<br> </li>
 <li>
<i> </i> 
 Expert knowledge on DFIR tools such as Access Data, IDA Pro, FTK+, Encase<br> </li>
 <li>
<i> </i> 
 Expert knowledge on threat hunting tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Familiarity with network tools such as Wireshark, tcpdump, libpcap.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GCIA, GCIH, or CISSP Certifications<br> </li>
 <li>
<i> </i> 
 SANS Certified Forensic Examiner (GCFE)<br> </li>
 <li>
<i> </i> 
 Forensic/ Incident Response Professional<br> </li>
 <li>
<i> </i> 
 Industry Certification on Digital Forensics Tool<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div><br></div></div><div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Digital Forensics and Incident Response Consultant

Explore 762+ Incident response analyst in Dubai this October. Find roles across top companies and apply now to boost your career.