business analyst

cx analyst

security officer

compliance analyst

cyber security engineer

security operations center analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution HawkEye CSOC cyber command center. </li>
 <li>
 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution. </li>
 <li>
 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack. </li>
 <li>
 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation. </li>
 <li>
 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research. </li>
 <li>
 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture. </li>
 <li>
 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt. </li>
 <li>
 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations. </li>
 <li>
 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems. </li>
 <li>
 
 Ensure that corporate data and technology platform components are safeguarded from known threats. </li>
 <li>
 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools </li>
 <li>
 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources. </li>
 <li>
 
 Understanding and implementing the SOC processes and procedures. </li>
 <li>
 
 Follow standard operating procedures for detecting, classifying, and reporting. </li>
 <li>
 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff. </li>
 <li>
 
 Communicate effectively with customers, team-mates, and management. </li>
 <li>
 
 Provide input on tuning and optimization of security systems. </li>
 <li>
 
 Follow ITIL practices regarding incident, problem and change management. </li>
 <li>
 
 Document and maintain customer build documents, security procedures and processes. </li>
 <li>
 
 Stay up to date with current vulnerabilities, attacks, and countermeasures. </li>
 <li>
 
 Reviews the latest alerts to determine relevancy and urgency. </li>
 <li>
 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review. </li>
 <li>
 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.) </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 3+ years of experience of network/security architecture or operations experience </li>
 <li>
 
 Experience working on specific SOC/SIEM platforms </li>
 <li>
 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm </li>
 <li>
 
 Experience in SOAR technologies Demisto, Cybersponse, FortiSOAR, Swimlane </li>
 <li>
 
 Excellent experience in MDR or EDR </li>
 <li>
 
 Experience in using security tools commercial and open source </li>
 <li>
 
 Experience in defensive technologies NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files. </li>
 <li>
 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 GIAC Certified Intrusion Analyst (GCIA) </li>
 <li>
 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC </li>
 <li>
 
 GIAC Certified Incident Handler (GCIH) issued by GIAC </li>
 <li>
 
 Certified Ethical Hacker (CEH) issued by EC-Council </li>
 <li> </li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

INFRA ASSURE

The SOC L1 Analyst is responsible for continuous monitoring, detection, triage, and initial response to security incidents across enterprise systems. The analyst will work with SIEM and EDR tools such as IBM QRadar, Microsoft Sentinel, and CrowdStrike Falcon to identify and escalate potential threats, ensuring the organization&rsquo;s information assets remain secure.Key Responsibilities<ul><li>Monitor and analyze security alerts from SIEM platforms (IBM QRadar, Microsoft Sentinel).</li><li>Review and investigate endpoint security alerts from CrowdStrike Falcon.</li><li>Perform initial triage of events, determine severity, and escalate to L2/L3 analysts when necessary.</li><li>Assist in incident response processes by providing detailed logs, findings, and evidence.</li><li>Maintain and update incident tickets in the SOC management system.</li><li>Conduct basic network traffic analysis, log correlation, and malware detection using SOC tools.</li><li>Follow standard operating procedures (SOPs) for incident handling.</li><li>Prepare daily/weekly security reports and contribute to SOC metrics.</li><li>Collaborate with IT, infrastructure, and application teams to validate or remediate alerts.</li></ul>Required Skills &amp; Tools<ul><li>SIEM Tools: IBM QRadar, Microsoft Sentinel</li><li>EDR: CrowdStrike Falcon or equivalent</li><li>Operating Systems: Windows, Linux, macOS</li><li>Networking Concepts: TCP/IP, DNS, Firewalls, VPNs</li><li>Security Standards: ISO 27001, NIST, MITRE ATT&amp;CK Framework</li><li>Ticketing Tools: ServiceNow, JIRA, or equivalent</li></ul>Qualifications<ul><li>Bachelor&rsquo;s Degree in Computer Science, Information Security, or related field.</li><li>1&ndash;2 years of experience in SOC operations or cybersecurity monitoring.</li><li>Relevant certifications preferred:</li><li>CompTIA Security+, CEH, IBM QRadar Certified, CrowdStrike Certified Falcon Administrator (CCFA), or Microsoft SC-200.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Which SIEM platforms have you worked with?</li><li>Have you worked in a 24x7 SOC environment or rotational shift setup before?</li><li>What ticketing systems have you used ?</li><li>Are you currently based in the UAE and eligible to work ?</li></ul>Experience:<ul><li>SOC operations or cybersecurity monitoring: 2 years (Preferred)</li></ul>

SOC L1 Analyst

Paramount Assure

<div> L2 SOC Analyst Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) Role Overview: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. Location: Onsite Key Responsibilities: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. Requirements: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</div>

SOC L2

Finclutech FZO

We are seeking a highly skilled SOC Analyst (L1) to join our IT team in Dubai, UAE. You will be responsible for monitoring, detecting, analyzing, and responding to security events and incidents to protect our organization's information assets. Preference will be given to candidates with SOC Analyst experience and proficiency in SIEM platforms (Splunk, QRadar, ArcSight) or any other security monitoring tools.Responsibilities:-<ul><li>Provide first-line technical support to end-users regarding network connectivity, security protocols, and related issues.</li><li>Actively monitor and investigate security alerts to detect malicious activity at our clients during your shift in our 24x7x365.</li><li>Follow documented procedures to properly triage and respond to identified activities, such as escalation or remediation actions.</li><li>Communicate and collaborate with clients through the lifecycle of all escalated security investigations.</li><li>Monitor, manage and maintain all network devices, performance, and quality across networks.</li><li>Perform regular training to stay sharp on the latest technologies, methodologies, etc.</li><li>Stay up to date on the latest vulnerabilities, threats, and attacks around the world.</li><li>Document incidents from initial detection through final resolution or escalation</li><li>Operate within direction to investigate and escalate incidents or alerts in accordance with protocols and contractual service level agreements (SLAs)</li><li>Work a day and night shift rotational schedule.</li><li>Monitor security events received through alerts from SIEM or other network and security monitoring tools.</li><li>Maintain assigned ticket queue.</li><li>Following Standard Operating Procedures (SOPs) for remediating various technology issues.</li></ul>Qualifications:-<ul><li>3-5 years of experience in an IT performance analysis or SOC Analyst role with a security focus.</li><li>Bachelor&rsquo;s degree in information technology or related field or equivalent Security monitoring experience with one or more SIEM technologies</li><li>A strong understanding of fundamental IT security concepts, including firewalls, intrusion detection/prevention systems, and access control.</li><li>Experience with security incident and event management (SIEM) tools (e.g., Splunk, Sumo Logic, ELK Stack)</li><li>Knowledge of common security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls).</li><li>Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, and enterprise Anti-Virus products</li><li>Familiarity with IT service desk ticketing systems (e.g., ServiceNow, Jira Service Desk, Zendesk)</li><li>Strong knowledge of IT including multiple operating systems and system administration skills (Windows, Apple, Linux)</li><li>Proficiency in customer relationship management (CRM) and task management software</li><li>Excellent communication skills, with the ability to convey technical information to non-technical users effectively.</li></ul>What we offer:-<ul><li>A competitive salary and package.</li><li>Working in a disruptive and fast-growing industry where the possibilities are endless</li><li>A diverse team and inclusive culture.</li><li>Outstanding teammates who want to celebrate your success</li><li>The opportunity to join the next big global fintech.</li></ul>Job Types: Full-time, Permanent

SOC Analyst

Emirates Investment Bank pjsc

<div>
 
 
 Job Purpose:
 
 
 
 The Senior Associate &ndash; Security Operations Centre (SOC) will play a pivotal role within the Information Security team, serving as a primary responder to cybersecurity threats targeting the bank&rsquo;s critical systems and digital infrastructure across both cloud environments and on-premises. This position is responsible for the continuous monitoring, analysis, and response to security incidents, while ensuring the confidentiality, integrity, and availability of critical systems.
 
 
 The role also involves close collaboration with cross-functional teams to enhance the bank&rsquo;s security operations capabilities and maintain a robust cybersecurity posture.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Monitor, analyze, and respond to security events using MXDR SIEM, EDR, and DLP tools.
 </li>
 <li>
 Lead end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident reviews.
 </li>
 <li>
 Correlate internal telemetry with threat intelligence to identify and mitigate emerging risks.
 </li>
 <li>
 Conduct proactive threat hunting and anomaly detection across hybrid environments (on-prem and cloud).
 </li>
 <li>
 Manage and optimize SOC dashboards, reports, and KPIs for operational visibility and executive reporting.
 </li>
 <li>
 Provide oversight and monitoring of premise and cloud environments (Azure), ensuring alignment with security best practices.
 </li>
 <li>
 Collaborate with IT, Desktop, and Application teams to ensure the critical systems and application logs (On premise and Cloud) are sent to the SIEM to monitor.
 </li>
 <li>
 Support regulatory compliance assessments (UAE IA, SWIFT, PCI-DSS) through gap assessments and remediation tracking.
 </li>
 <li>
 Perform vulnerability and compliance baseline scans (Qualys)and coordinate with IT Operation on patching activities.
 </li>
 <li>
 Continuously improve SOC processes, playbooks, and automation workflows to enhance efficiency and response times.
 </li>
 <li>
 Conduct user access reviews, Firewall/IPS rule/policy checks, and security device configuration audits.
 </li>
 <li>
 Develop and monitor data leakage prevention and data classification solutions, escalate data leakage alerts to the manager, and ensure banks data classified, monitored and protected in accordance with the data classification policy.
 </li>
 <li>
 Plan and deliver security awareness programs, phishing simulations, and targeted information security training.
 </li>
 <li>
 Support in creating, reviewing, and updating security policies, guidelines, and procedures.
 </li>
 <li>
 Review alerts from brand protection solution and coordinate with the vendor to mitigate such alerts.
 </li>
 <li>
 Support in conducting risk assessments, user access review for critical applications, Infrastructure, and cloud environment and third parties who offer critical services to the bank.
 </li>
 <li>
 Mentor Trainee and contribute to the overall maturity and capability uplift of the SOC.
 </li>
 </ul>
 
 
 
 
 
 Qualification &amp; Certification:
 
 
 
 
 
 Education &amp; Technical Proficiency:
 
 
 
 <ul>
 <li>
 Master&rsquo;s or bachelor&rsquo;s degree in computer engineering, Information Security, or a related field from recognized University.
 </li>
 <li>
 Working experience in different Information security / IT Security domains.
 </li>
 <li>
 Working knowledge or familiarity of Splunk, Azure Sentinel, Forcepoint Proxy, Azure Security.
 </li>
 <li>
 Hands on experience in DLP and Data Classification Solutions (e.g., Forcepoint, Microsoft Purview).
 </li>
 <li>
 Solid understanding of cloud security (Microsoft Azure) monitoring and compliance standards.
 </li>
 <li>
 Vulnerability and Compliance management tools (Qualys) and log aggregation platforms.
 </li>
 <li>
 Familiarity with GRC or risk management platforms (e.g., ServiceNow GRC, MetricStream) is an advantage.
 </li>
 <li>
 Familiarity with automation scripting (e.g., Python) is a plus.
 </li>
 </ul>
 
 
 
 
 
 
 Certifications:
 
 
 
 <ul>
 <li>
 Information Security Certifications: Azure Security Engineer (AZ-500), CISA, Security+, CEH, GCIA, or equivalent industry certifications. (any two certifications are must)
 </li>
 <li>
 Professional certifications such as CCSK, CISM, CRISC (good to have).
 </li>
 </ul>
 
 
 
 
 
 Experience &amp; Skills:
 
 
 
 
 
 Experience:
 
 
 
 <ul>
 <li>
 6-7 years of progressive experience in cybersecurity, with at least 3-4 years in a banking or financial services SOC environment.
 </li>
 </ul>
 
 
 
 Skills:
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving abilities with and report writing skills.
 </li>
 <li>
 Excellent communication skills, capable of translating complex technical issues for non-technical stakeholders.
 </li>
 <li>
 High ownership mindset with the ability to perform under pressure in a challenging environment.
 </li>
 <li>
 Effective stakeholder management and a collaborative team player.
 </li>
 <li>
 Passion for continuous learning and staying current with the evolving threat landscape.
 </li>
 </ul>
</div>

Senior Associate – Security Operation Centre

<div>At GAC Group IT, our dedication to providing top-notch solutions to 6000+ users worldwide rely on the dependability of our IT systems, all while upholding our ISO 27001 certification. As we grow the GAC Group IT Team, we are actively seeking a IT Security Analyst to bring his/her technological proficiency to enhance our security protocols.
The Group IT team is dedicated to constructing, configuring, maintaining, and enhancing applications throughout their life cycle while safeguarding them against cyber threats.
Key Responsibilities:<ul><li>
Implement and maintain security solutions for our network, infrastructure and applications hosted in On-prem Data Center and Azure Cloud.</li><li>
Closely work with Software development &amp; DevSecOps teams to resolve issues</li><li>
Guide GAC branch offices to improve their IT security posture.</li><li>
Monitor and respond to security incidents and perform root cause analysis.</li><li>
Research and stay updated on the latest security trends and best practices.</li></ul> 
Requirements:<ul><li>
A bachelor&rsquo;s degree in computer science/ information security</li><li>
A minimum of 2 years of experience as an IT Security Analyst or a similar role</li><li>
A proficiency in implementing &amp; managing security tools such as CSPM, VAPT, VMDR, EDR.</li><li>
excellent teamwork, problem-solving, analytical and communication skills</li><li>
Holding relevant certifications such as Azure Security (AZ-500), CCSP etc. will be advantages.</li></ul></div>

Group-IT Security Analyst

Egis Group

Job Summary:We are seeking a highly skilled and experienced Smartsheet & Power BI Solutions Analyst & Developer to support and optimize our portfolio reporting and collaboration platforms. The ideal candidate has a minimum of 4 years handson experience in advanced Smartsheet features including Control Center Data Shuttle Portfolio WorkApps and Dynamic View as well as robust Power BI reporting capabilities.This role will be responsible for building scalable Smartsheet solutions integrating data from multiple sources and delivering insightful dashboards to support business decisionmaking and project portfolio visibility.Key Responsibilities:<ul><li>Design build and manage scalable Smartsheet solutions using Control Center Dynamic View and Portfolio WorkApps.</li><li>Develop and maintain Data Shuttle workflows for efficient and automated data transfer and updates.</li><li>Create and manage Power BI dashboards and reports integrating Smartsheet and other data sources.</li><li>Collaborate with crossfunctional teams to understand business needs and translate them into technical solutions.</li><li>Maintain data integrity enforce data governance and ensure the security of sensitive information.</li><li>Provide training documentation and user support for Smartsheet solutions and Power BI reporting tools.</li><li>Troubleshoot and resolve issues related to workflows permissions integrations and reporting.</li></ul> Qualifications :Required Skills & Qualifications:<ul><li>4 years of advanced Smartsheet experience including:<ul><li>Control Center (solution configuration blueprint management global updates)</li><li>Data Shuttle (data mapping scheduled workflows integrations)</li><li>Portfolio WorkApps (rolebased access custom UI for project portfolios)</li><li>Dynamic View (secure stakeholder collaboration and data filtering)</li></ul></li><li>Strong Power BI skills including:<ul><li>Data modeling DAX and report design</li><li>Integration with Smartsheet via connectors or APIs</li><li>Dashboard creation for executive and operational reporting</li></ul></li><li>Experience with data governance security permissions and version control</li><li>Excellent problemsolving skills and the ability to manage multiple priorities</li><li>Strong communication and collaboration abilities</li><li>Bachelors degree in IT Business Analytics or related field (or equivalent experience)</li></ul> Remote Work :No Employment Type :Fulltime<img src="https://www.jobg8.com/Tracking.aspx?fWvNQADmqkvphZKvWYFs1TaoILrhVJKIb" width="0" height="0" />

Project Controls Systems Specialist

Explore 5541+ Security operations center analyst in Dubai this October. Find roles across top companies and apply now to boost your career.