incident response analyst

Strategic Business Systems, Inc

<div>**Current active DoD Secret clearance required**
<p>
SBS is seeking an experienced Incident Response Analyst to support the protection of enterprise systems, networks, and data. This role is responsible for identifying, analyzing, and responding to cybersecurity incidents while implementing proactive security measures to safeguard the organization&rsquo;s information infrastructure.</p>
<h2 class="jobSectionHeader"><b>Key Responsibilities</b></h2>
<ul><li><p>Plan and implement security measures to protect computer systems, networks, and data from loss, unauthorized access, and service disruptions.</p>
</li><li><p>Monitor network activity and investigate potential security incidents.</p>
</li><li><p>Analyze, document, and respond to cybersecurity risks, breaches, and related incidents, including impact assessments.</p>
</li><li><p>Develop and maintain network disaster recovery and incident response plans.</p>
</li><li><p>Install, configure, and manage security technologies such as firewalls, intrusion detection/prevention systems, and data encryption solutions.</p>
</li><li><p>Conduct vulnerability assessments, testing, and security audits to identify weaknesses.</p>
</li><li><p>Collaborate with cross-functional security teams to strengthen network defenses.</p>
</li><li><p>Research and recommend security enhancements, tools, and technology investments.</p>
</li><li><p>Work with leadership to develop and implement cybersecurity best practices and policies.</p>
</li><li><p>Stay current on emerging IT intelligence technologies, cybersecurity trends, and industry standards.</p>
</li><li><p>Train staff on network and IT security procedures and promote security awareness across the organization.</p>
</li></ul><h2 class="jobSectionHeader"><b>Required Qualifications</b></h2>
<ul><li>Active Security+ certification</li>
<li>2&ndash;4 years of experience in cybersecurity, incident response, or network security.</li>
<li><p>Strong understanding of security monitoring, threat detection, and incident analysis.</p>
</li><li><p>Experience with firewalls, encryption technologies, and security software solutions.</p>
</li><li><p>Knowledge of disaster recovery planning and cybersecurity frameworks.</p>
</li><li><p>Excellent analytical, documentation, and communication skills.</p><br>
</li></ul><h3 class="jobSectionHeader"><br>
<b>About SBS</b></h3>
<p>SBS offers a <b>comprehensive benefits package</b> for eligible full-time employees, including Medical, Dental, Vision, 401(k), and Life/Disability coverage. Employees have the opportunity to work with cutting-edge enterprise technologies in a fast-paced environment that rewards leadership, innovation, and creative problem-solving.</p>
<p>Strategic Business Systems, Inc. (SBS) is an <b>Equal Opportunity Employer</b>. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.</p>
<p></p><p>If you&rsquo;re interested in learning more about this opportunity, please send your resume to <b>recruiting@sbsplanet.com</b>.</p></div>

Incident Response Analyst- Intermediate

Sentara

<div><b>Department and Name:</b> Cyber &ndash; SecOps &amp; BISO- Consolidated Hospital Support<br>
<b>Physical Location:</b> Norfolk, VA<br>
<b>Location Type:</b> Remote<br>
<b>Employment Status:</b> Regular-Full time<br>
<b>Shift:</b> First (Days)<br>
<b>Posted Date:</b> February 27, 2026</div>
<br><div><div><div><h2 class="jobSectionHeader"><b>Job Overview</b></h2></div><div><div><div>
<div><h1 class="jobSectionHeader"><b>Sentara is hiring for a Cybersecurity Analyst!</b></h1>
<p>This position is fully remote!</p>
<h1 class="jobSectionHeader"><b>Overview</b></h1>
<p>Responsible for day-to-day support and optimization of software applications, including builds, upgrades, and system enhancements. Analyzes business / clinical needs, evaluate software releases and/or new products, and gives recommendations to optimize processes and decrease expenses. Possesses in-depth business / clinical and application knowledge and experience. Performs and documents workflow assessments to determine functional requirements for optimal utilization of applications. Develops system test plans and performs testing of software upgrades and patches. Maintains a record of test progress and test results. Responsible for problem, incident, and change management and service requests. Provides daily on-call support to the customer base for application-related issues. Works within a cross-functional team and with end-users to achieve application integration to meet business / clinical needs. Responsible for the communication of software issues, requirements, upgrades, and enhancements. Oversees smaller-sized projects or components of projects. Coordinates implementation or project planning around software application releases. Possesses a key certification(s) or other credential(s) which is determined central to the systems or applications supported.
</p><p>An Experienced Professional applies practical knowledge of job areas typically obtained through advanced education and work experience.
</p><p>Responsibilities typically include:
</p><ul><li>Works independently with general supervision.
</li></ul><ul><li>Problems faced are difficult but typically not complex.
</li></ul><ul><li>May influence others within the job area through explanation of facts, policies, and practices.</li></ul><br>
<p><b>Position Summary:</b><br>
Our Cybersecurity Analyst role specializes in incident response, Endpoint Detection &amp; Response (EDR), and Security Information and Event Management (SIEM). In this critical role, you will help protect sensitive patient and organizational data by proactively detecting, analyzing, and responding to cybersecurity threats, while ensuring compliance with HIPAA and other healthcare regulations. This position requires participation in a 24/7 on-call rotation to respond promptly to security incidents.</p>
<p><b>Key Responsibilities:</b></p>
<ul><li>Monitor all platforms for security incidents</li>
<li>Lead and support incident response efforts&mdash;from identification and analysis to containment, eradication, and recovery&mdash;with a focus on safeguarding Protected Health Information (PHI) and ensuring minimal impact to patient care.</li>
<li>Analyze logs, forensic data, and network traffic across a complex healthcare IT environment</li>
<li>Help to develop and tune SIEM correlation rules and alerting to detect threats.</li>
<li>Serve as part of a 24/7 on-call rotation, responding rapidly to incidents and escalations as they arise, including after-hours and weekends.</li>
<li>Ensure incident handling aligns with HIPAA and other relevant regulations; participate in incident debriefs and continuous improvement initiatives.</li>
<li>Collaborate with clinical, IT, compliance, and third-party vendors to assess risk and remediate vulnerabilities across critical systems and devices.</li>
<li>Document incident response actions in detail, maintaining records for legal, compliance, and audit purposes.</li>
<li>Participate in healthcare-specific threat hunting, vulnerability assessments, and security exercises to strengthen organizational resilience.</li>
<li>Maintain current knowledge of emerging cyber threats, vulnerabilities, and regulatory changes that could impact healthcare operations.</li>
</ul><p><b>Required Skills and Qualifications:</b></p>
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, IT, or a related field; or equivalent experience.</li>
<li>3+ years of experience in a SOC, incident response, or health IT cybersecurity role.</li>
<li>Proven experience with EDR tools and SIEM solutions, with preference for healthcare environments.</li>
<li>Familiarity with HIPAA and healthcare risk management practices.</li>
<li>Strong communication, teamwork, and documentation skills; able to communicate effectively with technical and clinical stakeholders.</li>
<li>Availability to participate in a 24/7 on-call rotation and respond to security incidents outside of standard business hours.</li>
</ul><h1 class="jobSectionHeader"><b>Minimum Education Qualifications</b></h1>
<ul><li>3 years of relevant experience with a degree (Required)</li>
</ul><p>or</p>
<ul><li>5+ years of relevant experience without a degree (Required)</li>
<li>Experience in lieu of Bachelor&rsquo;s Degree</li>
</ul><h1 class="jobSectionHeader"><b>Certification/Licensure</b></h1>
<ul><li>Relevant certifications (CISSP, CEH) are preferred.</li>
</ul><h1 class="jobSectionHeader"><b>Minimum Experience Qualifications</b></h1>
<ul><li>3 to 5+ years of relevant experience</li>
</ul><p>Talroo-IT, #LI-DS1, #Indeed, #Dice, #Monster</p>
<p>Keywords: Incident response (SOC), end point detection (EDR), cybersecurity analyst, SIEM, CISSP, CEH</p>
</div></div></div></div></div><div><div><h2 class="jobSectionHeader"><b>About Us</b></h2></div><div><div>
<p>Sentara Health, an integrated, not-for-profit health care delivery system, celebrates more than 135 years in pursuit of its mission &ndash; &ldquo;we improve health every day.&rdquo; Sentara is one of the largest health systems in the U.S. Mid-Atlantic and Southeast, and among the top 20 largest not-for-profit integrated health systems in the country, with 34,000 employees, 12 hospitals in Virginia and Northeastern North Carolina including 10 hospitals with the prestigious Magnet&reg; recognition, and the Sentara Health Plans division which serves more than 1 million members in Virginia and Florida. Sentara is recognized nationally for clinical quality and safety, and is strategically focused on innovation and creating an extraordinary health care experience for our patients and members. Sentara was named a Health Quality Innovator of the Year (2024), was recognized by Forbes as &ldquo;America&rsquo;s Best-In-State Employer&rdquo; (2024), &ldquo;Best Employer for Veterans&rdquo; (2022, 2023), and &ldquo;Best Employer for Women&rdquo; (2020), and named to IBM Watson Health&rsquo;s &ldquo;Top 15 Health Systems&rdquo; (2021, 2018).</p>
<p>Learn more (Opens in a new tab)</p></div></div></div></div>

Cybersecurity Analyst - Remote

Capgemini

<div><div><div><p>Cairo</p><div>
SOC IMR Analyst</div><p>
</p></div></div><div></div><div><div><div><div><div><p><b>
About Capgemini</b></p><p>
Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.</p><div></div><div><div><div><p><b>
Role Description:</b></p><p>
</p><p>Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.</p><p>
</p><p><b>Key Responsibilities:</b></p><ul><li>
Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.</li><li>
Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.</li><li>
Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.</li><li>
Deliver clear, concise status updates for stakeholders at all levels.</li><li>
Prepare comprehensive incident reports tailored to both technical and non-technical audiences.</li><li>
Interpret and present technical cybersecurity subjects to executives.</li><li>
Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.</li><li>
Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.</li><li>
Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.</li><li>
Define, improve, and support incident response processes, playbooks, and methodologies.</li><li>
Contribute to audit support and maintain documentation.</li><li>
Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.</li><li>
Analyze and improve the effectiveness of existing use cases.</li><li>
Develop and deliver documentation, knowledge articles, and visual materials.</li><li>
Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.</li><li>
Stay current on emerging threats, technologies, and regulatory changes.</li><li>
you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities</li></ul><p>
</p><p><b>Experience &amp; Qualifications:</b></p><ul><li>
3+ years in Information Security or related fields.</li><li>
Incident management certifications such as<b> CCIM, GCIH.</b></li><li>
Technical certifications such as <b>GCFA, CHFI, CFCE.</b></li><li>
Vendor certifications such as <b>CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.</b></li><li>
Experience with ITIL frameworks.</li><li>
Technical background in computing, networks, or programming.</li><li>
Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).</li><li>
Industry-recognized certifications such as <b>CISSP or CISM.
</b></li><li>Proven experience handling cybersecurity incidents and risk management.</li><li>
Strong written and verbal communication skills in English.</li><li>
Experience in digital forensics, threat hunting, or enterprise‑scale incident response.</li><li>
Ability to manage multiple priorities in fast‑paced environments.</li><li>
Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).</li><li>
Broad understanding of the cybersecurity threat landscape.</li><li>
Solid grasp of IT and security methodologies and technologies.</li></ul></div></div></div><div>
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
</div><div></div><div>Get the future you want | www.capgemini.com
</div></div></div><div><div><div><div><div>Ref. code</div><div>
413452-en_US</div></div><div><div>
Posted on</div><div>
18 Feb 2026</div></div><div><div>
Experience level</div><div>
Experienced Professionals</div></div><div><div>
Contract type</div><div>
Permanent</div></div><div><div>
Location</div><div>
Cairo</div></div><div><div>
Business unit</div><div>
Other Delivery units</div></div><div><div>
Brand</div><div>
Capgemini</div></div><div><div>
Professional communities</div><div>
Cybersecurity</div></div></div></div></div></div></div></div></div><p></p>

SOC IMR Analyst

Systems Limited

<div>
 <p>
  Systems Limited is seeking an experienced
  <strong>
   SOC Analyst &ndash; Level 2 (Tier 2 / Incident Responder)
  </strong>
  to strengthen its cybersecurity operations. This role is responsible for advanced threat investigation, incident response, and containment of security incidents.
 </p>
 <p>
  The candidate will handle escalated alerts from Level 1 analysts, perform in-depth technical analysis, and drive remediation efforts across endpoint, network, and cloud environments. This position serves as the technical backbone of SOC operations and plays a critical role in protecting organizational assets against advanced cyber threats.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Lead investigation of escalated security incidents from Level 1 SOC analysts
  </li>
  <li>
   Perform root cause analysis and reconstruct attack chains
  </li>
  <li>
   Conduct endpoint, network, and cloud-based forensic investigations
  </li>
  <li>
   Execute containment and remediation actions including endpoint isolation, account disablement, and IOC blocking
  </li>
  <li>
   Develop and optimize custom KQL and detection queries
  </li>
  <li>
   Tune SIEM and XDR rules to reduce false positives and improve detection accuracy
  </li>
  <li>
   Handle advanced incidents such as ransomware attacks, lateral movement, credential compromise, and data exfiltration
  </li>
  <li>
   Map incidents to MITRE ATT&amp;CK framework for structured analysis
  </li>
  <li>
   Prepare detailed incident reports and executive-level summaries
  </li>
  <li>
   Support proactive threat hunting activities
  </li>
  <li>
   Assist with onboarding of new customers and log sources into SOC platforms
  </li>
  <li>
   Mentor and guide Level 1 SOC analysts
  </li>
  <li>
   Participate in Purple Team engagements alongside Red Team exercises
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <ul>
  <li>
   5&ndash;6 years of experience in SOC operations or Incident Response
  </li>
  <li>
   Strong knowledge of Windows and Active Directory security, network security principles, endpoint security technologies, and cloud security fundamentals (Azure and/or AWS)
  </li>
  <li>
   Hands-on experience with SIEM and XDR platforms and understanding of malware behavior and attacker techniques
  </li>
  <li>
   Experience across the full incident response lifecycle with the ability to write and optimize detection queries (KQL preferred)
  </li>
  <li>
   Strong analytical, documentation, and communication skills
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Location: Khi/ Lhr/ Isb
 </p>
 <p>
 </p>
</div>


SOC Analyst

Hope Global School

<div><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<p>SOC Senior Analyst leads cybersecurity monitoring, threat detection, and incident response operations. The role protects enterprise networks by analyzing security alerts, investigating threats, managing SIEM tools, and strengthening organizational cyber defense strategies.</p>
<h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3>
<ul><li>Monitor security alerts using advanced SIEM tools</li>
<li>Investigate cybersecurity incidents and perform threat analysis</li>
<li>Lead incident response and containment procedures</li>
<li>Conduct log analysis and forensic investigations</li>
<li>Develop security monitoring rules and detection usecases</li>
<li>Coordinate with IT teams during security incidents</li>
<li>Prepare detailed incident reports and recommendations</li>
<li>Mentor junior analysts within security operations center.</li>
</ul><h3 class="jobSectionHeader"><b>Skill &amp; Experience</b></h3>
<ul><li>Strong knowledge of cybersecurity frameworks and standards</li>
<li>Expertise in SIEM tools and threat detection</li>
<li>Ability to analyze logs and network traffic</li>
<li>Experience handling complex cybersecurity incident investigations</li>
<li>Strong analytical and problem solving abilities</li>
<li>Excellent communication and technical reporting skills.</li></ul></div>
<br><div></div><div><ul><li><div><div>Date Posted</div>
<div>February 11, 2026</div>
</div></li><div></div><li><div><div>Location</div>
<div><div>Doha, Qatar
</div></div></div></li><div></div><li><div><div>Offered Salary:</div>
 <div>254000 - 354000 / year</div>
</div></li><div></div><li><div><div>Expiration date</div>
<div>February 16, 2028
</div></div></li><div></div><li><div><div>Experience</div>
<div>5 Year
</div></div></li><div></div><li><div><div>Gender</div>
<div>Both
</div></div></li><div></div><li><div><div>Qualification</div>
<div>Bachelor Degree</div></div></li></ul></div>

SOC Senior Analyst

Perpect Purity LLC

<p><b>Job Summary:</b></p><p>We&rsquo;re hiring a <b>Cybersecurity Analyst</b> with 2+ years of industry proven experience. The ideal</p><p>candidate has <b>hands-on expertise</b> in any two of the following: <b>SOC operations, SIEM, EDR, </b></p><p><b>email security, WAAP, GRC, Application Security or network protection, and a working </b></p><p><b>knowledge of the remaining areas</b>. You will monitor and analyze security events, detect and</p><p>respond to incidents, and implement proactive defenses to protect organizational assets.</p><p>The role also involves fine-tuning security tools, documenting playbooks, and contributing</p><p>to continuous improvement aligned with Industry best practices.</p><p><b>Key Responsibilities:</b></p><ul><li>Monitor and analyze security events from SIEM, EDR, WAAP and other monitoring tools.</li><li>Investigate and respond to security alerts, incidents, and potential breaches.</li><li>Support SOC operations and ensure timely escalation and resolution of incidents.</li><li>Implement and maintain endpoint detection and response (EDR) solutions.</li><li>Manage and enhance email security platforms to prevent phishing, spoofing, and</li></ul><p>malware.</p><ul><li>Assist in configuring, maintaining, and monitoring firewalls, proxies, and network</li></ul><p>security controls.</p><ul><li>Collaborate with IT and application teams to ensure Web Application &amp; API Protection</li></ul><p>(WAAP) is effectively implemented and maintained.</p><ul><li>Perform vulnerability assessments and assist in remediation activities.</li><li>Prepare incident reports, dashboards, and provide insights for continuous</li></ul><p>improvement.</p><ul><li>Contribute to security awareness and training initiatives.</li></ul><p><b>Required Skills &amp; Qualifications:</b></p><p><b>2+ years in cybersecurity/SOC operations.</b></p><ul><li>Hands-on expertise in at least two: SOC ops, SIEM, EDR, email security, WAAP, or</li></ul><p>network protection; working knowledge of the others.</p><ul><li>Experience with common tools (e.g., CrowdStrike/S1; Splunk/QRadar/Sentinel;</li></ul><p>Barracuda/Proofpoint; firewalls/IDS/IPS).</p><ul><li>Strong incident response, investigation, and reporting skills with clear communication.</li><li>Relevant certifications (e.g., CEH, CompTIA Security+, CCNA Security, or equivalent)</li></ul><p>preferred</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>How many total years do you have in cybersecurity/SOC operations?</li><li>Please select the number/s where you have hands-on expertise: 1. SOC Ops, 2. SIEM, 3. EDR, 4. Email security, 5. WAAP 6. Network protection?</li><li>Which among these common tools you have experience with (Please select number/s) 1. CrowdStrike 2. S1 3. Splunk 4. QRadar 5. Sentinel 6. Barracuda 7. Proofpoint 8. firewalls 9. IDS 10. IPS</li><li>Do you have a strong incident response, investigation, and reporting skills?</li><li>Do you have relevant certifications (e.g., CEH, CompTIA Security+, CCNA Security, or equivalent)? </li><li>How many years of experience do you have as a Cybersecurity Analyst in the UAE?</li><li>How many days can you join if selected/ How many days is your notice period?</li><li>How much is your current monthly salary in UAE Dirhams?</li><li>How much is your monthly salary expectations in UAE Dirhams?</li></ul>

Cyber Security Analyst

Swedishtechnology

<p>We are looking for The <b>SOC Specialist</b> is responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents within the organization. This role involves working in a Security Operations Center (SOC) environment to ensure the confidentiality, integrity, and availability of IT systems and data. The SOC Specialist will utilize advanced security tools, threat intelligence, and incident response procedures to safeguard the organization against cyber threats.</p><p><b>Key Responsibilities</b></p><ul><li><b>Continuous Monitoring:</b> Monitor network traffic, endpoints, and security systems using SIEM tools and other technologies.</li><li><b>Threat Detection &amp; Analysis:</b> Identify and analyze security alerts, suspicious activities, and potential incidents in real-time.</li><li><b>Incident Response:</b> Investigate and respond to security incidents.</li><li><b>Threat Intelligence: </b>Use threat intelligence feeds to improve detection and response capabilities.</li><li><b>Vulnerability Management:</b> Assist in vulnerability assessments and recommend remediation actions.</li><li><b>Reporting &amp; Documentation:</b> Prepare detailed incident reports and maintain logs for compliance and audit purposes.</li><li><b>Collaboration:</b> Work closely with IT and cybersecurity teams to implement security best practices.</li><li><b>Tool Management:</b> Configure and maintain SOC tools such as SIEM, IDS/IPS, EDR, and firewalls.</li><li><b>Proactive Threat Hunting:</b></li><li>Conduct advanced searches for Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).</li><li>Use threat intelligence and behavioral analytics to identify hidden threats.</li><li>Develop and execute threat hunting hypotheses to uncover sophisticated attacks.</li><li>Document findings and recommend preventive measures to strengthen security posture.</li></ul><p><b>Required Qualifications</b></p><ul><li><b>Education:</b> Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or related field.</li><li><b>Experience:</b> 2&ndash;5 years in SOC operations or cybersecurity roles.</li><li><b>Certifications (Preferred):</b></li><li>CompTIA Security+</li><li>Certified SOC Analyst (CSA)</li><li>CEH (Certified Ethical Hacker)</li><li>SIEM-specific certifications (e.g., Splunk)</li></ul><p><b>Skills &amp; Competencies</b></p><ul><li>Strong knowledge of network protocols, operating systems, and security principles.</li><li>Hands-on experience with SIEM tools (e.g., Splunk, QRadar, ArcSight).</li><li>Familiarity with incident response frameworks (e.g., NIST, SANS).</li><li>Advanced threat hunting and forensic analysis skills.</li><li>Analytical and problem-solving skills with attention to detail.</li><li>Ability to work in a 24/7 shift environment if required.</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>are you In Dubai ?</li></ul><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li> in IT: 4 years (Required)</li><li>SOC : 3 years (Required)</li><li>security systems using SIEM: 3 years (Required)</li><li>cybersecurity operations: 3 years (Preferred)</li></ul><p>Language:</p><ul><li>Arabic  (Preferred)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>driving (Preferred)</li><li>golden visa (Preferred)</li></ul>

SOC Specialist support cybersecurity operations

Search 6920+ Incident response analyst jobs near you this March. New roles added regularly across leading industries. Apply today.