business analyst

assistant security manager

security officer

cyber security engineer

it operations support specialist Jobs in Dubai

it operations support specialist

security operations center analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Paramount Assure

<div> <p>L2 SOC Analyst   </p> <p> <br> </p> <p>Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) </p> <p> <br> </p> <p> <strong>Role Overview</strong>: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. </p> <p> <br> </p> <p> <strong>Location</strong>: Onsite </p> <p> <br> </p> <p> <strong>Key Responsibilities</strong>: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. </p> <p> <br> </p> <p> <strong>Requirements</strong>: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</p></div>

SOC L2

Dicetek

A leading IT services company in the UAE is seeking an experienced L2 SOC Analyst to enhance its security operations. The ideal candidate must possess in-depth knowledge of cloud security, incident response, and a variety of security management tools. Responsibilities include managing security incidents, analyzing logs, and ensuring robust network protection. This contract position offers a dynamic work environment with opportunities for professional growth.

L2 SOC Analyst: Cloud Security & Threat Intel (Contract)

ENEC Operations

<p><b>Job Title:</b> Cyber Security Operations Centre Monitoring and Analysis</p><p><b>Responsibilities And Accountabilities:</b></p><ul><li>Monitor Cyber Security events from various sources, including, but not limited to, Security Information and Event Management systems, Intrusion Detection Systems/ Intrusion Prevention Systems network monitoring tools and log files analysis, check for potential issues to ensure that potential malicious activities are mitigated or prevented.</li><li>Triage Alerts that are triggered by the Security Information and Event Management systems before they are raised to Tier-2 analysts to ensure that that Tier-2 analysts have enough information to further investigate events.</li><li>Investigate indicator of compromise in log management and security controls received by external and third-party advisories to ensure emerging threats are detected.</li></ul><p><b>Activity:</b> Alerts Investigation</p><p><b>Responsibilities And Accountabilities:</b></p><ul><li>Perform an initial investigation and correlation of events triggered in the Security Information and Event Management systems and other tools within the Cyber Security Operations Centre to identify possible security threats to the environment.</li><li>Identify non-malicious false alerts and work with other stakeholders to exclude them from being triggered in the future.</li><li>Asses and/or escalate the alerts raised by the tooling within in the time set by the applicable Service-Level Agreement (SLA).</li></ul><p><b>Activity:</b> Security Triage</p><p><b>Responsibilities And Accountabilities:</b></p><ul><li>Extract artefacts of interest from log data and examine them, recording all relevant information in a Security Incident ticket to make sure that the Tier-2 analyst has all the information to efficiently and effectively assess the potential incident.</li><li>Escalate alerts raised by the Security Information and Event Management systems, into potential Incidents, to Tier-2 analysts for confirmation</li></ul><p><b>Activity:</b> Assets and Process Monitoring</p><p><b>Responsibilities And Accountabilities:</b></p><ul><li>Periodically check to ensure that the Critical Digital Assets (CDAs) and the plant operations network are properly monitored by checking the lists of CDAs against the actual assets that are sending logs to the Security Information and Event Management systems.</li><li>Ensure that the security monitoring systems are properly functioning, and that the data shown by them is accurate by following up the events that are triggered by the system if an asset did not send applicable logs for a predefined period.</li></ul><p><b>Activity:</b>Health and Safety, Security, and Business Continuity</p><p><b>Responsibilities And Accountabilities:</b></p><ul><li>All individuals take personal responsibility for safety; follow company HSE policies, procedures and instructions; avoid complacency and continuously challenge existing conditions and activities in order to identify discrepancies that might result in error or in appropriate action; report any situation that could present a hazard; not intentionally or recklessly interfere with or misuse anything provided at the workplace in the interest of health, safety, welfare or protection or management of the environment.</li><li>Follow all relevant Security policies, processes, procedures and instructions to ensure security compliance in all aspects of work, by applying them on self, others and Corporate assets.</li><li>Follow all relevant Business Continuity and Resilience requirements for compliance with, and adherence to, policies, procedures and instructions related to the effective planning for, and response to, incidents and/or business disruptions in order to continue critical business processes and activities with minimal adverse impact.</li></ul>

Cyber Security CSOC Specialist

Edvicons Middle East FZE

<p>Configure and operate a modern SOC using Microsoft Sentinel and Defender tools.</p><p>Detect, investigate, and respond to security incidents across endpoints, identities, cloud apps,</p><p>and infrastructure.</p><p>Write advanced KQL queries to perform threat detection, investigation, and reporting.</p><p>Hunt proactively for threats using analytics and threat intelligence (e.g., MITRE ATT&amp;CK, threat</p><p>indicators).</p><p>Automate security operations with playbooks and orchestration to speed up incident response.</p><p>Manage risk and exposure by using Defender for Endpoint and Defender for Cloud to identify</p><p>vulnerabilities and unprotected devices.</p><p>Protect identity and data by leveraging Defender for Identity, Entra ID, Purview, and Defender for</p><p>Office 365.</p><p>Use Microsoft Security Copilot to assist in threat analysis, investigations, and decision-making.</p><p>Build dashboards and reports (workbooks in Sentinel) to communicate security posture and</p><p>findings to stakeholders.</p><p>Prepare effectively for the SC&#8209;200 certification exam, as the course aligns with skills measured by</p><p>Job Types: Part-time, Contract</p><p>Pay: From AED2,000.00 per month</p><p>Application Question(s):</p><ul><li>Will you be able to conduct this session in person in Doha?</li></ul>

Microsoft SC‑200 – Security Operations Analyst For 5 days

Control Risks

<p>We are seeking Analysts of all levels to deliver high quality reporting, covering but not limited to areas around security-risk, intelligence, operations, and political risk.</p> <p>Areas of expertise we are looking to engage in are as follows:</p> <p> <strong>1. Intelligence Analyst</strong> </p> <p>Gather and evaluate information from different sources to predict and prevent organised crime activities. The use of law enforcement databases, surveillance, intelligence networks, and geographic information systems to predict crimes.<br> </p> <p> <strong>2. Security Analyst</strong> </p> <p>Conducting security assessments through vulnerability testing and risk analysis. Performing both internal and external security audits. Analysing and identifying security breaches, continuously updating company incident response and disaster recovery plans.<br> </p> <p> <strong>3. Political Analyst</strong> </p> <p>Examine and analyse issues such as economic conditions, crime levels, threat of conflict, government stability and governance, trade and regulations, or humanitarian and human rights issues.<br> </p> <p> <strong>4. Operations Analyst</strong> </p> <p>Review data which implicates an organisation s policies, procedures, and functions. Reviewing company data in correlation with data sources, to build reports based on these findings and recommending programmes to improve an organisation's performance.</p><p> <strong>Required Skills</strong> </p> <ul> <li>A minimum bachelor s degree in history, political science, international relations, intelligence analysis, criminal justice, regional studies, or a related discipline; master s degree strongly preferred</li> <li>Minimum 1-2 years of experience </li> <li>Broad knowledge of geopolitical affairs, and global awareness of influences on business goals and strategies</li> <li>Attention to detail, with the ability to anticipate trends which may have an impact on the organisation, extending to environment and people</li> <li>Ability to interpret high volumes of data, from multiple sources</li> <li>The ability to compile concise and accurate reporting, using the appropriate language for its audience</li> <li>Work well under pressure in moments of emergency response </li> <li>Responsive to changing environments and adaptable to unpredictable circumstances </li> <li>Strong client focus and the ability to build and maintain relationships</li> <li>Excellent research, analytical, writing, and verbal presentation skills</li> <li>Excellent IT skills, in MS office, and confident to learn new systems</li> <li>Additional ad hoc requests</li> <li>Dual linguistic skills are favoured but not essential </li> </ul> <p> <strong>Behavioural Skills</strong> </p> <p> </p> <ul> <li>A team player who works professionally with colleagues and stakeholders at all levels</li> <li>An excellent understanding of client and business confidentiality </li> <li>Cultural awareness and ability to work alongside a global team</li> <li>Proactive and confident in articulating ideas with peers across the organisation</li> <li>Ability to demonstrate resilience and perseverance in difficult situations</li> <li> </li> </ul>

Analyst - Speculative

MDS CRITICAL FACILITIES MANAGEMENT SERVICES LLC

<p>We are currently seeking an experienced and proactive Data Center <strong>Site Technician Engineer</strong> to join our team and ensure the smooth operation, maintenance, and optimization of various customer data centers.</p>
<p>If you re a skilled technician with a strong understanding of data center operations and a commitment to maintaining high standards of reliability and performance, we encourage you to apply. Join us in ensuring the operational excellence of our critical data center facilities.</p>
<p><strong>Responsibilities:</strong></p>
<ul>
<li>Collaborate with data center operations teams to ensure the proper installation, maintenance, and repair of critical infrastructure components, including power distribution, cooling systems, and networking equipment.</li>
<li>Conduct routine inspections and audits of data center facilities, identifying and addressing any issues related to power, cooling, and environmental controls.</li>
<li>Perform troubleshooting and diagnostics on hardware, networking, and electrical systems to quickly resolve technical issues and minimize downtime.</li>
<li>Assist in the planning and execution of data center projects, including equipment upgrades, capacity planning, and hardware installations.</li>
<li>Monitor and respond to environmental and security alarms, ensuring the safety and security of the data center environment.</li>
<li>Document all maintenance activities, incidents, and procedures, maintaining accurate records for future reference.</li>
<li>Collaborate with vendors and suppliers to coordinate equipment repairs, replacements, and procurement.</li>
<li>Follow strict safety protocols and best practices to maintain a secure and compliant data center environment.</li>
</ul>

Site Technician Engineer

Explore 6412+ Security operations center analyst in Dubai this November. Find roles across top companies and apply now to boost your career.