business analyst

security guard

security supervisor

senior business analyst

operations administrator

security operations analyst

<div>At GAC Group IT, our dedication to providing top-notch solutions to 6000+ users worldwide rely on the dependability of our IT systems, all while upholding our ISO 27001 certification. As we grow the GAC Group IT Team, we are actively seeking a IT Security Analyst to bring his/her technological proficiency to enhance our security protocols.
The Group IT team is dedicated to constructing, configuring, maintaining, and enhancing applications throughout their life cycle while safeguarding them against cyber threats.
Key Responsibilities:<ul><li>
Implement and maintain security solutions for our network, infrastructure and applications hosted in On-prem Data Center and Azure Cloud.</li><li>
Closely work with Software development &amp; DevSecOps teams to resolve issues</li><li>
Guide GAC branch offices to improve their IT security posture.</li><li>
Monitor and respond to security incidents and perform root cause analysis.</li><li>
Research and stay updated on the latest security trends and best practices.</li></ul> 
Requirements:<ul><li>
A bachelor&rsquo;s degree in computer science/ information security</li><li>
A minimum of 2 years of experience as an IT Security Analyst or a similar role</li><li>
A proficiency in implementing &amp; managing security tools such as CSPM, VAPT, VMDR, EDR.</li><li>
excellent teamwork, problem-solving, analytical and communication skills</li><li>
Holding relevant certifications such as Azure Security (AZ-500), CCSP etc. will be advantages.</li></ul></div>

Group-IT Security Analyst

PCS Gulf

PCS Gulf excels in IT and financial consulting, driven by the belief that optimal solutions arise from a diverse network of experts collaborating across IT, Finance, and business strategy. Our seasoned team remains industry leaders, staying updated on the latest trends. We provide innovative, cutting-edge solutions tailored to clients' needs, drawing from vast industry exposure. Collaborating closely, we craft comprehensive solutions addressing all aspects of business. With a stellar track record and proficiency, we empower clients, from startups to large corporations, to realize their full potential. At PCS Gulf, our unwavering dedication is to deliver tangible results.
 Roles and Responsibilities: <ul>
 <li>Monitoring computer network for security issues. </li>
 <li>Investigating security breaches and other cyber security incidents. </li>
 <li>Installing security measures and operating software to protect systems and information infrastructure including firewalls and endpoint security programs. </li>
 <li>Document security breaches and assess the damage they cause. </li>
 <li>Work with security team to perform tests and uncover network vulnerabilities. </li>
 <li>Fix detected vulnerabilities to maintain a high security standard. </li>
 <li>Stay updated on IT security trends and news. </li>
 <li>Develop company wide best practices for IT security. </li>
 <li>Perform penetrating test. </li>
 <li>Help colleagues install security software and understand about information security management. </li>
</ul> Requirements: <ul>
 <li>Proven work experience as cyber security analyst or similar role in financial services or crypto space. </li>
 <li>Experience in information security or related field. </li>
 <li>Experience with computer network penetration testing and techniques. </li>
 <li>Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts. </li>
 <li>Ability to identify and mitigate network vulnerabilities and explain how to avoid them. </li>
</ul> 
Familiarity with windows, iOS and Linux.

Cybersecurity Analyst

DICETEK LLC

<div>Responsibilities<ul><li>
Monitor and analyse the organization's networks and systems on a daily basis to detect, identify, investigate, and mitigate potential threats.</li><li>
Identify anomalous behavior, recognize patterns of malicious activity, and take appropriate corrective action
</li><li>Follow detailed operational process and procedures to appropriately analyse, escalate, and assist in remediation of critical information security incidents.</li><li>
Correlate and analyse events using the Splunk/Log Rhythm SIEM tool to detect IT security incidents.</li><li>
Conduct analysis of log files, including forensic analysis of system resource access.</li><li>
Monitor multiple security technologies, such as SIEM, IDS/IPS, EDR, Firewalls, Switches, VPNs, and other security threat data sources.</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Respond in a timely manner (within documented SLA) to support, threat, and other cases.</li><li>
Document actions in cases to effectively communicate information internally and to customers.</li><li>
Resolve problems independently and understand escalation procedure.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Perform other essential duties as assigned.</li><li>
Able to work in rotating shifts within a 24/7 operating environment.</li></ul>
Qualifications &amp; Skills
<ul><li>3-5 years of experience in Security Operations, Incident response and monitoring , threat hunting etc.</li><li>
A Degree in Computer Science, Information Systems or equivalent.</li><li>
CCNA, CompTIA CySA+, CISSP, GCA, GCIA, GCIH, CEH, SIEM-specific certifications would be preferable.</li><li>
An active interest in internet security, incident detection, network and systems security.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience of analysing and interpreting system, security, and application logs.</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security related devices produce.</li><li>
Experience in using SIEM tools such as Splunk &amp; Log Rhythm.</li><li>
TCP/IP knowledge, networking, and security product experience.</li><li>
Knowledge of Cyber Kill Chain and MITRE ATT&amp;CK frameworks.</li><li>
Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
Ability to analyse data, such as logs or packets captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents
</li><li>Strong analytical and problem-solving skills.</li><li>
Very good communication skills.</li><li>
Strong interpersonal skills with the ability to collaborate well with others.</li></ul></div>

Security Analyst

Emirates Investment Bank pjsc

<div>
 
 
 Job Purpose:
 
 
 
 The Senior Associate &ndash; Security Operations Centre (SOC) will play a pivotal role within the Information Security team, serving as a primary responder to cybersecurity threats targeting the bank&rsquo;s critical systems and digital infrastructure across both cloud environments and on-premises. This position is responsible for the continuous monitoring, analysis, and response to security incidents, while ensuring the confidentiality, integrity, and availability of critical systems.
 
 
 The role also involves close collaboration with cross-functional teams to enhance the bank&rsquo;s security operations capabilities and maintain a robust cybersecurity posture.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Monitor, analyze, and respond to security events using MXDR SIEM, EDR, and DLP tools.
 </li>
 <li>
 Lead end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident reviews.
 </li>
 <li>
 Correlate internal telemetry with threat intelligence to identify and mitigate emerging risks.
 </li>
 <li>
 Conduct proactive threat hunting and anomaly detection across hybrid environments (on-prem and cloud).
 </li>
 <li>
 Manage and optimize SOC dashboards, reports, and KPIs for operational visibility and executive reporting.
 </li>
 <li>
 Provide oversight and monitoring of premise and cloud environments (Azure), ensuring alignment with security best practices.
 </li>
 <li>
 Collaborate with IT, Desktop, and Application teams to ensure the critical systems and application logs (On premise and Cloud) are sent to the SIEM to monitor.
 </li>
 <li>
 Support regulatory compliance assessments (UAE IA, SWIFT, PCI-DSS) through gap assessments and remediation tracking.
 </li>
 <li>
 Perform vulnerability and compliance baseline scans (Qualys)and coordinate with IT Operation on patching activities.
 </li>
 <li>
 Continuously improve SOC processes, playbooks, and automation workflows to enhance efficiency and response times.
 </li>
 <li>
 Conduct user access reviews, Firewall/IPS rule/policy checks, and security device configuration audits.
 </li>
 <li>
 Develop and monitor data leakage prevention and data classification solutions, escalate data leakage alerts to the manager, and ensure banks data classified, monitored and protected in accordance with the data classification policy.
 </li>
 <li>
 Plan and deliver security awareness programs, phishing simulations, and targeted information security training.
 </li>
 <li>
 Support in creating, reviewing, and updating security policies, guidelines, and procedures.
 </li>
 <li>
 Review alerts from brand protection solution and coordinate with the vendor to mitigate such alerts.
 </li>
 <li>
 Support in conducting risk assessments, user access review for critical applications, Infrastructure, and cloud environment and third parties who offer critical services to the bank.
 </li>
 <li>
 Mentor Trainee and contribute to the overall maturity and capability uplift of the SOC.
 </li>
 </ul>
 
 
 
 
 
 Qualification &amp; Certification:
 
 
 
 
 
 Education &amp; Technical Proficiency:
 
 
 
 <ul>
 <li>
 Master&rsquo;s or bachelor&rsquo;s degree in computer engineering, Information Security, or a related field from recognized University.
 </li>
 <li>
 Working experience in different Information security / IT Security domains.
 </li>
 <li>
 Working knowledge or familiarity of Splunk, Azure Sentinel, Forcepoint Proxy, Azure Security.
 </li>
 <li>
 Hands on experience in DLP and Data Classification Solutions (e.g., Forcepoint, Microsoft Purview).
 </li>
 <li>
 Solid understanding of cloud security (Microsoft Azure) monitoring and compliance standards.
 </li>
 <li>
 Vulnerability and Compliance management tools (Qualys) and log aggregation platforms.
 </li>
 <li>
 Familiarity with GRC or risk management platforms (e.g., ServiceNow GRC, MetricStream) is an advantage.
 </li>
 <li>
 Familiarity with automation scripting (e.g., Python) is a plus.
 </li>
 </ul>
 
 
 
 
 
 
 Certifications:
 
 
 
 <ul>
 <li>
 Information Security Certifications: Azure Security Engineer (AZ-500), CISA, Security+, CEH, GCIA, or equivalent industry certifications. (any two certifications are must)
 </li>
 <li>
 Professional certifications such as CCSK, CISM, CRISC (good to have).
 </li>
 </ul>
 
 
 
 
 
 Experience &amp; Skills:
 
 
 
 
 
 Experience:
 
 
 
 <ul>
 <li>
 6-7 years of progressive experience in cybersecurity, with at least 3-4 years in a banking or financial services SOC environment.
 </li>
 </ul>
 
 
 
 Skills:
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving abilities with and report writing skills.
 </li>
 <li>
 Excellent communication skills, capable of translating complex technical issues for non-technical stakeholders.
 </li>
 <li>
 High ownership mindset with the ability to perform under pressure in a challenging environment.
 </li>
 <li>
 Effective stakeholder management and a collaborative team player.
 </li>
 <li>
 Passion for continuous learning and staying current with the evolving threat landscape.
 </li>
 </ul>
</div>

Senior Associate – Security Operation Centre

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution HawkEye CSOC cyber command center. </li>
 <li>
 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution. </li>
 <li>
 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack. </li>
 <li>
 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation. </li>
 <li>
 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research. </li>
 <li>
 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture. </li>
 <li>
 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt. </li>
 <li>
 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations. </li>
 <li>
 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems. </li>
 <li>
 
 Ensure that corporate data and technology platform components are safeguarded from known threats. </li>
 <li>
 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools </li>
 <li>
 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources. </li>
 <li>
 
 Understanding and implementing the SOC processes and procedures. </li>
 <li>
 
 Follow standard operating procedures for detecting, classifying, and reporting. </li>
 <li>
 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff. </li>
 <li>
 
 Communicate effectively with customers, team-mates, and management. </li>
 <li>
 
 Provide input on tuning and optimization of security systems. </li>
 <li>
 
 Follow ITIL practices regarding incident, problem and change management. </li>
 <li>
 
 Document and maintain customer build documents, security procedures and processes. </li>
 <li>
 
 Stay up to date with current vulnerabilities, attacks, and countermeasures. </li>
 <li>
 
 Reviews the latest alerts to determine relevancy and urgency. </li>
 <li>
 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review. </li>
 <li>
 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.) </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 3+ years of experience of network/security architecture or operations experience </li>
 <li>
 
 Experience working on specific SOC/SIEM platforms </li>
 <li>
 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm </li>
 <li>
 
 Experience in SOAR technologies Demisto, Cybersponse, FortiSOAR, Swimlane </li>
 <li>
 
 Excellent experience in MDR or EDR </li>
 <li>
 
 Experience in using security tools commercial and open source </li>
 <li>
 
 Experience in defensive technologies NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files. </li>
 <li>
 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 GIAC Certified Intrusion Analyst (GCIA) </li>
 <li>
 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC </li>
 <li>
 
 GIAC Certified Incident Handler (GCIH) issued by GIAC </li>
 <li>
 
 Certified Ethical Hacker (CEH) issued by EC-Council </li>
 <li> </li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Control Risks

We are seeking Analysts of all levels to deliver high quality reporting, covering but not limited to areas around security-risk, intelligence, operations, and political risk. Areas of expertise we are looking to engage in are as follows: 1. Intelligence Analyst Gather and evaluate information from different sources to predict and prevent organised crime activities. The use of law enforcement databases, surveillance, intelligence networks, and geographic information systems to predict crimes. 2. Security Analyst Conducting security assessments through vulnerability testing and risk analysis. Performing both internal and external security audits. Analysing and identifying security breaches, continuously updating company incident response and disaster recovery plans. 3. Political Analyst Examine and analyse issues such as economic conditions, crime levels, threat of conflict, government stability and governance, trade and regulations, or humanitarian and human rights issues. 4. Operations Analyst Review data which implicates an organisation s policies, procedures, and functions. Reviewing company data in correlation with data sources, to build reports based on these findings and recommending programmes to improve an organisation's performance. Required Skills <ul> <li>A minimum bachelor s degree in history, political science, international relations, intelligence analysis, criminal justice, regional studies, or a related discipline; master s degree strongly preferred</li> <li>Minimum 1-2 years of experience </li> <li>Broad knowledge of geopolitical affairs, and global awareness of influences on business goals and strategies</li> <li>Attention to detail, with the ability to anticipate trends which may have an impact on the organisation, extending to environment and people</li> <li>Ability to interpret high volumes of data, from multiple sources</li> <li>The ability to compile concise and accurate reporting, using the appropriate language for its audience</li> <li>Work well under pressure in moments of emergency response </li> <li>Responsive to changing environments and adaptable to unpredictable circumstances </li> <li>Strong client focus and the ability to build and maintain relationships</li> <li>Excellent research, analytical, writing, and verbal presentation skills</li> <li>Excellent IT skills, in MS office, and confident to learn new systems</li> <li>Additional ad hoc requests</li> <li>Dual linguistic skills are favoured but not essential </li> </ul> Behavioural Skills <ul> <li>A team player who works professionally with colleagues and stakeholders at all levels</li> <li>An excellent understanding of client and business confidentiality </li> <li>Cultural awareness and ability to work alongside a global team</li> <li>Proactive and confident in articulating ideas with peers across the organisation</li> <li>Ability to demonstrate resilience and perseverance in difficult situations</li> <li> </li> </ul>

Analyst - Speculative

Paramount Assure

<div> L2 SOC Analyst Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) Role Overview: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. Location: Onsite Key Responsibilities: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. Requirements: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</div>

SOC L2

Explore 5096+ Security operations analyst in Dubai this October. Find roles across top companies and apply now to boost your career.