analyst

security supervisor

incident response engineer

soc analyst

application security architect Jobs in Dubai

application security architect

security operations center (soc) analyst

Mind Stream

Candidate Profile: Senior Cybersecurity ExpertExperience: Minimum 8&ndash;10 years of progressive experience in cybersecurity, with a strong background in securing cloud and on-premises environments, implementing security frameworks, and managing risk across complex infrastructures.Core Competencies<ul><li>Cloud Security: Expertise in securing Microsoft Azure and Google Cloud Platform (GCP) environments, including networking, identity management, and compliance.</li><li>Infrastructure Security: Strong knowledge of Windows/Linux servers, Active Directory, Exchange, and virtualization technologies.</li><li>DevSecOps &amp; Automation: Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform, and container security for Kubernetes/Docker.</li><li>Application &amp; Network Security: Proficient in firewalls (IDS/IPS), Web Application Firewalls (WAF), email filtering, endpoint protection (AV), and Wi-Fi/network security.</li><li>Networking &amp; Security: Advanced experience with EDR (Endpoint Detection &amp; Response), XDR (Extended Detection &amp; Response), and NDR (Network Detection &amp; Response) solutions for proactive threat detection and response.</li><li>SOC &amp; Incident Response: Skilled in Security Operations Center (SOC) services, threat detection, vulnerability management, patching strategies, and SEIM solutions.</li><li>Forensic Investigation: Ability to conduct digital forensics and root cause analysis for security incidents, including evidence collection, chain of custody, and reporting.</li><li>Compliance &amp; Governance: Strong understanding of ISO 27001, policy development, documentation, and regulatory alignment.</li><li>Monitoring &amp; Risk Management: Experience with monitoring solutions, asset management, and service delivery frameworks.</li></ul>Technical Ecosystem Familiarity<ul><li>Cloud Services: Azure Services and Google Cloud Services</li><li>Networking &amp; Security: IDS/IPS, WAF, VPN, secure telephony, EDR/XDR/NDR, routing and switching</li><li>Tools &amp; Processes: Service desk, patching, virtualization, databases</li><li>Governance: Writing policies, procedures, and security documentation</li></ul>Soft Skills<ul><li>Strong analytical and problem-solving abilities</li><li>Excellent communication and stakeholder engagement skills</li><li>Ability to lead security initiatives and mentor junior team members</li></ul>Preferred Certifications<ul><li>CISSP, CISM, CCSP, or equivalent</li><li>ISO 27001 Lead Implementer/Auditor (advantageous)</li><li>GCFA or CHFI for forensic expertise (advantageous)</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>How many years of total cybersecurity experience do you have?</li><li>Do you have at least 8&ndash;10 years of experience in cybersecurity?</li><li>Do you have strong experience securing Microsoft Azure and/or Google Cloud Platform (GCP)?</li><li>Do you have hands-on experience with Infrastructure as Code (IaC) tools such as Terraform?</li><li>Do you have experience in container security (Kubernetes/Docker)?</li><li>How many years of experience do you have working with firewalls, IDS/IPS, WAF, and endpoint security?</li><li>Do you have experience with EDR, XDR, or NDR tools?</li><li>What is your current and expected salary? Notice period?</li></ul>

Senior Cybersecurity Expert

CRYPTO.com

<div><div>As a member of the ETMSA team at Crypto.com, you will be integral to responding to and managing cybersecurity threats and incidents throughout their lifecycle &ndash; from Preparation to Identification, Containment, Eradication, Recovery, and Lessons Learned &ndash; collaborating with a global team of incident responders.</div><div></div><div> 
You will apply your comprehensive skills in cyber defense, digital forensics, log analysis, and intrusion analysis to address security incidents across our endpoints, network, and cloud infrastructure. In this role, you will be responsible for prevention, detection, response, and remediation activities, ensuring that information assets and technologies are adequately protected by leveraging various technologies such as Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and more.</div><div></div><div> 
You will also leverage your collaboration and communication skills to work effectively with all relevant stakeholders in multicultural and global environments.</div><ul><li>
- 
</li></ul><div></div> 
<div>Responsibilities</div><div></div><ul><li> 
Report to Director to facilitate all phases in the incident response lifecycle</li><li>Be involved in various incident prevention projects to improve Security posture</li></ul><div></div><div> 
Preparation</div><ul><li>Understand different regulatory and compliance requirements like critical time to report, escalation flows, etc.</li><li>Take part in self-assessment exercises like Tabletop Exercises, Attack Simulations, Red/Purple Team exercises to make sure the incident response process is working smoothly</li><li>Develop incident response runbooks, playbooks and SOPs with reference to different regulatory requirements</li></ul><div>
- Evaluate the incident response readiness of different layers - people, process, technology</div><div></div><div> 
Detection &amp; Analysis</div><ul><li>Respond to the cyber security incidents escalated from various channels including the 24/7 SOC team.</li><li>Respond to cyber security incidents in compliance with the local authority / regulatory requirements.</li><li>Assess the risk, impact and scope of the identified security threats</li><li>Perform deep-dive incident analysis of various data sources by analysing and investigating security related logs against medium-term threats and IOCs</li></ul><div></div><div> 
Containment, Eradication and Recovery</div><ul><li>Communicate with the stakeholders and provide guidance, recommendations to contain and eradicate the security incident</li><li>Participate in root cause analysis using forensic and other custom tools to identify any sources of compromise and/or malicious activities taking place.</li><li>Document and present investigative findings for high profile events and other incidents of interest.</li></ul><div></div><div> 
Post incident activities</div><ul><li>Provide lessons learnt meeting to the stakeholders</li><li>Lead and keep track on the follow-up activities</li><li>Document the incident in the case management system and provide incident reports</li></ul><div></div><div> 
Always ready to jump in, in the event of security incidents.</div>
<h3 class="jobSectionHeader">Requirements</h3><ul><li>
At least 2 years experience in the Cyber Security industry</li><li>
Strong technical and analytical skills</li><li>
Familiar with the cyber security incident response process</li><li>
Familiarity with AI tools and their application in automating security tasks and processes.</li><li>
Hands-on experience on performing incident response activities</li><li>
Have scripting experience like Bash, PowerShell, Python, Go, etc, and the ability to use these skills to aid in responding to incidents involving Windows, Linux, macOS, as well as cloud environment</li><li>
Have knowledge of cybersecurity tools and software like NGFW, EDR, IDS/IPS, EDR, DLP, SIEM, other log management platforms, etc.</li><li>
Be familiar with the MITRE ATT&amp;CK Framework and/or Cyber Kill Chain</li><li>
Be passionate on exploring new technologies and having creative initiative to boost the team capabilities</li><li>
Holders of security related certifications is a plus (e.g.Azure, AWS, CISSP, GCIH, GCIA, GCFA, GNFA, GREM, or other equivalent)</li><li>
Awareness of regulatory and compliance requirements like GDPR, MAS, PSD2 etc is a plus.</li></ul><div></div><h3 class="jobSectionHeader"> 
Preferably</h3><ul><li>
Fast learner with can do attitude and ready to get the hands dirty</li><li>
A strong team player who can collaborate with compassion</li><li>
Passionate to learn and willing to put in the extra effort</li><li>
Understand the concept of ownership and accountability coupled with sense of urgency and prioritisation</li><li>
Confidence in handling incidents and managing relevant senior and technical stakeholders</li><li>
Possess business acumen/mindset (not only technical) when making critical decisions</li></ul><div></div> 
We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.</div>

Incident Response Engineer

Crypto.com

<div>
 
 As a member of the ETMSA team at Crypto.com, you will be integral to responding to and managing cybersecurity threats and incidents throughout their lifecycle &ndash; from Preparation to Identification, Containment, Eradication, Recovery, and Lessons Learned &ndash; collaborating with a global team of incident responders.
 
 
 
 
 
 
 
 
 You will apply your comprehensive skills in cyber defense, digital forensics, log analysis, and intrusion analysis to address security incidents across our endpoints, network, and cloud infrastructure. In this role, you will be responsible for prevention, detection, response, and remediation activities, ensuring that information assets and technologies are adequately protected by leveraging various technologies such as Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and more.
 
 
 
 
 
 
 
 
 You will also leverage your collaboration and communication skills to work effectively with all relevant stakeholders in multicultural and global environments.
 
 
 -
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 
 
 
 
 - Report to Director to facilitate all phases in the incident response lifecycle
 
 
 - Be involved in various incident prevention projects to improve Security posture
 
 
 
 
 
 
 
 
 Preparation
 
 
 - Understand different regulatory and compliance requirements like critical time to report, escalation flows, etc.
 
 
 - Take part in self-assessment exercises like Tabletop Exercises, Attack Simulations, Red/Purple Team exercises to make sure the incident response process is working smoothly
 
 
 - Develop incident response runbooks, playbooks and SOPs with reference to different regulatory requirements
 
 
 - Evaluate the incident response readiness of different layers - people, process, technology
 
 
 
 
 
 
 
 
 Detection &amp; Analysis
 
 
 - Respond to the cyber security incidents escalated from various channels including the 24/7 SOC team.
 
 
 - Respond to cyber security incidents in compliance with the local authority / regulatory requirements.
 
 
 &nbsp;- Assess the risk, impact and scope of the identified security threats
 
 
 - Perform deep-dive incident analysis of various data sources by analysing and investigating security related logs against medium-term threats and IOCs
 
 
 
 
 
 
 
 
 Containment, Eradication and Recovery
 
 
 - Communicate with the stakeholders and provide guidance, recommendations to contain and eradicate the security incident
 
 
 - Participate in root cause analysis using forensic and other custom tools to identify any sources of compromise and/or malicious activities taking place.
 
 
 - Document and present investigative findings for high profile events and other incidents of interest.
 
 
 
 
 
 
 
 
 Post incident activities
 
 
 - Provide lessons learnt meeting to the stakeholders
 
 
 - Lead and keep track on the follow-up activities
 
 
 - Document the incident in the case management system and provide incident reports
 
 
 
 
 
 
 
 
 Always ready to jump in, in the event of security incidents.
 
 
 
 
 
 
 Requirements
 
 <ul>
 <li>
 At least 2 years experience in the Cyber Security industry
 </li>
 <li>
 Strong technical and analytical skills
 </li>
 <li>
 Familiar with the cyber security incident response process
 </li>
 <li>
 Familiarity with AI tools and their application in automating security tasks and processes
 </li>
 <li>
 Hands-on experience on performing incident response activities
 </li>
 <li>
 Have scripting experience like Bash, PowerShell, Python, Go, etc, and the ability to use these skills to aid in responding to incidents involving Windows, Linux, macOS, as well as cloud environment
 </li>
 <li>
 Have knowledge of cybersecurity tools and software like NGFW, EDR, IDS/IPS, EDR, DLP, SIEM, other log management platforms, etc
 </li>
 <li>
 Be familiar with the MITRE ATT&amp;CK Framework and/or Cyber Kill Chain
 </li>
 <li>
 Be passionate on exploring new technologies and having creative initiative to boost the team capabilities
 </li>
 <li>
 Holders of security related certifications is a plus (e.g.Azure, AWS, CISSP, GCIH, GCIA, GCFA, GNFA, GREM, or other equivalent)
 </li>
 <li>
 Awareness of regulatory and compliance requirements like GDPR, MAS, PSD2 etc is a plus
 
 
 </li>
 </ul>
 
 
 
 
 Preferably
 
 <ul>
 <li>
 Fast learner with can do attitude and ready to get the hands dirty
 </li>
 <li>
 A strong team player who can collaborate with compassion
 </li>
 <li>
 Passionate to learn and willing to put in the extra effort
 </li>
 <li>
 Understand the concept of ownership and accountability coupled with sense of urgency and prioritisation
 </li>
 <li>
 Confidence in handling incidents and managing relevant senior and technical stakeholders
 </li>
 <li>
 Possess business acumen/mindset (not only technical) when making critical decisions
 
 
 
 </li>
 </ul>
 
 
 
 
 
 
 We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
 
</div>

DICETEK LLC

<ul><li>Resource should have in-depth knowledge and experience in cloud security</li><li>Resource must have in-depth knowledge in Incident Response Process &amp; Procedure</li><li>Resource must be well experienced in Security Event Log Analysis</li><li>Resource must have Network Traffic Analysis skill</li><li>Resource must have worked in major Antivirus/Malware solutions</li><li>Resource must have experience in Intrusion Detection/Prevention systems</li><li>Resource should have experience in administering in Security Incident and Event Management Systems (SIEM) tool</li><li>Resource should have rich knowledge in Firewalls</li><li>Resource must have Advanced Persistent Threat handling capability</li><li>Resource must have experience in Web Application Firewall configurations</li><li>Resource should have good experience in Penetration testing tools and techniques</li><li>Resource should aware about vulnerability management and patching</li><li>Resource should have extensive knowledge in Threat intelligence</li></ul>

SOC Analyst

Nets-international Communication

L2 EngineerRequirementExperience7-8+ years of experience in SOC operations, focusing on Level 2 incident handling.Availability 24x7 Onsite (Shift-based work in the Customer SOC).Core MandateAdvanced troubleshooting, incident resolution, root cause analysis (RCA), and defined escalation management.Key Responsibilities:<ul><li>Act as the primary escalation point from L1, taking ownership of declared incidents for in-depth investigation.</li><li>Perform advanced analysis of security events to determine scope, severity, and impact.</li><li>Engage with the event triage process to assign events/alerts to specific teams for investigation with defined escalation paths (internal or external).</li><li>Perform Emergency Response actions, including supporting containment and eradication efforts.</li><li>Resolve the incident with comprehensive analysis and documentation.</li><li>Provide detailed Root Cause Analysis (RCA) and trend analysis for all major and recurring incidents.</li><li>Receive, document, and report cyber security events and incidents accurately.</li><li>Maintain and contribute to the incident response knowledge base and runbooks.</li></ul>Required Skills:<ul><li>Expertise in forensic analysis across various platforms (endpoint, network, cloud).</li><li>Deep understanding of MITRE ATT&amp;CK framework and threat intelligence integration.</li><li>Advanced scripting/automation skills for response actions (SOAR integration</li><li>Certificates</li><li>CompTIA CySA+ (Emphasizes behavioral analytics, threat detection, and incident response).</li></ul>* Certified Ethical Hacker (CEH) (Understanding attacker methodology is key for defense). * GIAC Certified Incident Handler (GCIH) or EC-Council Certified Incident Handler (ECIH) (Focus on hands-on incident response).* GIAC Security Operations Certified (GSOC) (Advanced blue team operations). * GIAC Certified Detection Analyst (GCDA) (Focus on detection engineering). * Vendor-Specific Certs: Microsoft Sentinel Certified, IBM Certified SOC Analyst &ndash; QRadar SIEM or other specific SIEM/tool training, Qualys Vulnerability Tool.Job Type: Full-timeAbility to commute/relocate:<ul><li>Dubai: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>What is your current salary?</li><li>what is your expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>SOC L1: 5 years (Required)</li></ul>

SOC L2 Engineer

ISHRAQAT AL AMAL TECHNICAL SERVICES L.L.C

Information Security ConsultantLocation: Dubai Job Type: Full-Time Experience: 3&ndash;8 years in Information Security, Cybersecurity, or related domainsRole OverviewWe are looking for an Information Security Consultant with strong hands-on experience across security governance, cloud security, SOC operations, and vulnerability management. The ideal candidate should be able to enhance the organization&rsquo;s security posture, support compliance initiatives, and contribute to technical security assessments. A full match to every skill is not required, but candidates must demonstrate strong capability across most of the areas listed below.Key Responsibilities<ul><li>Support and maintain ISO 27001 compliance, documentation, audits, and security controls.</li><li>Implement and manage Data Loss Prevention (DLP) solutions.</li><li>Work with Microsoft Purview and other compliance tools for data governance and risk reduction.</li><li>Enhance and administer Azure security posture, including security configurations, monitoring, and remediation.</li><li>Conduct digital forensics investigations, incident analysis, and reporting.</li><li>Perform vulnerability assessments, remediation tracking, and risk reporting.</li><li>Deploy, configure, and optimize SOC tools and solutions; assist SOC teams in analysis and incident response.</li><li>Perform log fine-tuning and monitoring improvements across security systems.</li><li>Test, implement, and enhance Endpoint Detection &amp; Response (EDR) solutions.</li><li>Support or conduct penetration testing and red teaming (internal or external engagements).</li></ul>Required Skills (Strong proficiency in most of them)<ul><li>ISO 27001 Compliance</li><li>Data Loss Prevention (DLP)</li><li>Microsoft Purview &amp; Compliance tools</li><li>Azure Security Administration</li><li>Digital Forensics</li><li>Vulnerability Management</li><li>SOC Solutions (Implementation + Analysis)</li><li>Log Fine-Tuning</li><li>EDR Solutions (Testing &amp; Implementation)</li><li>Penetration Testing / Red Teaming</li></ul>Preferred CertificationsCandidates with any of the following certifications will be prioritized (not all required):<ul><li>SC-100 &ndash; Microsoft Cybersecurity Architect</li><li>ISO 27001 Audit Associate</li><li>Certified Ethical Hacker (CEH v12)</li><li>DLP Administrator Certification</li><li>SC-200 &ndash; Microsoft SOC Analyst</li><li>AZ-500 &ndash; Microsoft Azure Security Engineer Associate</li><li>Cloud Practitioner Certification</li><li>SC-300 &ndash; Microsoft Identity &amp; Access Administrator Associate</li></ul>Ideal Candidate Profile<ul><li>Strong technical understanding of cloud, endpoint, and network security.</li><li>Ability to work with minimal supervision and drive security initiatives.</li><li>Strong documentation, analytical, and problem-solving skills.</li><li>Exposure to enterprise security environments or consulting projects.</li></ul>Job Type: Full-timePay: AED10,000.00 - AED20,000.00 per monthApplication Question(s):<ul><li>How many years of hands-on experience do you have in Information Security (NOT IT support or networking)?</li><li>Have you directly worked with ISO 27001 (implementation, audits, or compliance)?</li><li>Have you implemented or managed any DLP solution (e.g., Microsoft, Symantec, Forcepoint)?</li><li>Rate your experience with Azure Security (0&ndash;10).</li></ul>What key configurations have you handled?<ul><li>Have you ever worked in a SOC environment (as an analyst or engineer)?</li><li>Do you have practical experience with EDR platforms (CrowdStrike, Defender, SentinelOne, etc.)?</li><li>Have you performed vulnerability assessments or penetration testing yourself (not just coordinating)?</li><li>List the relevant certifications you currently hold from this list:</li></ul>SC-100, SC-200, SC-300, AZ-500, CEH v12, ISO 27001, DLP Admin, Cloud Practitioner.<ul><li>What&rsquo;s your notice period? What&rsquo;s your expected salary range?</li></ul>

Information Security Consultant

Explore 3734+ Security operations center (soc) analyst in Dubai this December. Find roles across top companies and apply now to boost your career.

3734 security operations center (soc) analyst jobs IN Dubai

Senior Cybersecurity Expert

Incident Response Engineer

Incident Response Engineer

SOC Analyst

SOC Analyst

SOC L2 Engineer

Information Security Consultant