business analyst

data analyst

financial analyst

senior business analyst

senior data analyst

soc analyst

Finclutech FZO

<p>We are seeking a highly skilled <b>SOC Analyst </b>(L1) to join our IT team in Dubai, UAE. You will be responsible for monitoring, detecting, analyzing, and responding to security events and incidents to protect our organization's information assets. <b>Preference will be given to candidates with SOC Analyst experience and proficiency in SIEM platforms (Splunk, QRadar, ArcSight) or any other security monitoring tools.</b></p><p><b>Responsibilities:-</b></p><ul><li>Provide first-line technical support to end-users regarding network connectivity, security protocols, and related issues.</li><li>Actively monitor and investigate security alerts to detect malicious activity at our clients during your shift in our 24x7x365.</li><li>Follow documented procedures to properly triage and respond to identified activities, such as escalation or remediation actions.</li><li>Communicate and collaborate with clients through the lifecycle of all escalated security investigations.</li><li>Monitor, manage and maintain all network devices, performance, and quality across networks.</li><li>Perform regular training to stay sharp on the latest technologies, methodologies, etc.</li><li>Stay up to date on the latest vulnerabilities, threats, and attacks around the world.</li><li>Document incidents from initial detection through final resolution or escalation</li><li>Operate within direction to investigate and escalate incidents or alerts in accordance with protocols and contractual service level agreements (SLAs)</li><li><b>Work a day and night shift rotational schedule.</b></li><li>Monitor security events received through alerts from SIEM or other network and security monitoring tools.</li><li>Maintain assigned ticket queue.</li><li>Following Standard Operating Procedures (SOPs) for remediating various technology issues.</li></ul><p><b>Qualifications:-</b></p><ul><li>3-5 years of experience in an IT performance analysis or SOC Analyst role with a security focus.</li><li>Bachelor&rsquo;s degree in information technology or related field or equivalent Security monitoring experience with one or more SIEM technologies</li><li>A strong understanding of fundamental IT security concepts, including firewalls, intrusion detection/prevention systems, and access control.</li><li><b>Experience with security incident and event management (SIEM) tools (e.g., Splunk, Sumo Logic, ELK Stack)</b></li><li>Knowledge of common security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls).</li><li>Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, and enterprise Anti-Virus products</li><li><b>Familiarity with IT service desk ticketing systems (e.g., ServiceNow, Jira Service Desk, Zendesk)</b></li><li>Strong knowledge of IT including multiple operating systems and system administration skills (Windows, Apple, Linux)</li><li>Proficiency in customer relationship management (CRM) and task management software</li><li>Excellent communication skills, with the ability to convey technical information to non-technical users effectively.</li></ul><p><b>What we offer:-</b></p><ul><li>A competitive salary and package.</li><li>Working in a disruptive and fast-growing industry where the possibilities are endless</li><li>A diverse team and inclusive culture.</li><li>Outstanding teammates who want to celebrate your success</li><li>The opportunity to join the next big global fintech.</li></ul><p>Job Types: Full-time, Permanent</p>

SOC Analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Paramount Assure

<div> <p>L2 SOC Analyst   </p> <p> <br> </p> <p>Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) </p> <p> <br> </p> <p> <strong>Role Overview</strong>: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. </p> <p> <br> </p> <p> <strong>Location</strong>: Onsite </p> <p> <br> </p> <p> <strong>Key Responsibilities</strong>: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. </p> <p> <br> </p> <p> <strong>Requirements</strong>: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</p></div>

SOC L2

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

Emirates Investment Bank pjsc

<div>
 <p>
  <strong>
   Job Purpose:
  </strong>
 </p>
 <p>
  The Senior Associate &ndash; Security Operations Centre (SOC) will play a pivotal role within the Information Security team, serving as a primary responder to cybersecurity threats targeting the bank&rsquo;s critical systems and digital infrastructure across both cloud environments and on-premises. This position is responsible for the continuous monitoring, analysis, and response to security incidents, while ensuring the confidentiality, integrity, and availability of critical systems.
 </p>
 <p>
  The role also involves close collaboration with cross-functional teams to enhance the bank&rsquo;s security operations capabilities and maintain a robust cybersecurity posture.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Monitor, analyze, and respond to security events using MXDR SIEM, EDR, and DLP tools.
  </li>
  <li>
   Lead end-to-end incident response activities, including triage, investigation, containment, remediation, and post-incident reviews.
  </li>
  <li>
   Correlate internal telemetry with threat intelligence to identify and mitigate emerging risks.
  </li>
  <li>
   Conduct proactive threat hunting and anomaly detection across hybrid environments (on-prem and cloud).
  </li>
  <li>
   Manage and optimize SOC dashboards, reports, and KPIs for operational visibility and executive reporting.
  </li>
  <li>
   Provide oversight and monitoring of premise and cloud environments (Azure), ensuring alignment with security best practices.
  </li>
  <li>
   Collaborate with IT, Desktop, and Application teams to ensure the critical systems and application logs (On premise and Cloud) are sent to the SIEM to monitor.
  </li>
  <li>
   Support regulatory compliance assessments (UAE IA, SWIFT, PCI-DSS) through gap assessments and remediation tracking.
  </li>
  <li>
   Perform vulnerability and compliance baseline scans (Qualys)and coordinate with IT Operation on patching activities.
  </li>
  <li>
   Continuously improve SOC processes, playbooks, and automation workflows to enhance efficiency and response times.
  </li>
  <li>
   Conduct user access reviews, Firewall/IPS rule/policy checks, and security device configuration audits.
  </li>
  <li>
   Develop and monitor data leakage prevention and data classification solutions, escalate data leakage alerts to the manager, and ensure banks data classified, monitored and protected in accordance with the data classification policy.
  </li>
  <li>
   Plan and deliver security awareness programs, phishing simulations, and targeted information security training.
  </li>
  <li>
   Support in creating, reviewing, and updating security policies, guidelines, and procedures.
  </li>
  <li>
   Review alerts from brand protection solution and coordinate with the vendor to mitigate such alerts.
  </li>
  <li>
   Support in conducting risk assessments, user access review for critical applications, Infrastructure, and cloud environment and third parties who offer critical services to the bank.
  </li>
  <li>
   Mentor Trainee and contribute to the overall maturity and capability uplift of the SOC.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualification &amp; Certification:
  </strong>
 </p>
 <p>
  <strong>
   <u>
    Education &amp; Technical Proficiency:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Master&rsquo;s or bachelor&rsquo;s degree in computer engineering, Information Security, or a related field from recognized University.
  </li>
  <li>
   Working experience in different Information security / IT Security domains.
  </li>
  <li>
   Working knowledge or familiarity of Splunk, Azure Sentinel, Forcepoint Proxy, Azure Security.
  </li>
  <li>
   Hands on experience in DLP and Data Classification Solutions (e.g., Forcepoint, Microsoft Purview).
  </li>
  <li>
   Solid understanding of cloud security (Microsoft Azure) monitoring and compliance standards.
  </li>
  <li>
   Vulnerability and Compliance management tools (Qualys) and log aggregation platforms.
  </li>
  <li>
   Familiarity with GRC or risk management platforms (e.g., ServiceNow GRC, MetricStream) is an advantage.
  </li>
  <li>
   Familiarity with automation scripting (e.g., Python) is a plus.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Certifications:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Information Security Certifications: Azure Security Engineer (AZ-500), CISA, Security+, CEH, GCIA, or equivalent industry certifications. (any two certifications are must)
  </li>
  <li>
   Professional certifications such as CCSK, CISM, CRISC (good to have).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience &amp; Skills:
  </strong>
 </p>
 <p>
  <strong>
   <u>
    Experience:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   6-7 years of progressive experience in cybersecurity, with at least 3-4 years in a banking or financial services SOC environment.
  </li>
 </ul>
 <p>
  <strong>
   <u>
    Skills:
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Strong analytical and problem-solving abilities with and report writing skills.
  </li>
  <li>
   Excellent communication skills, capable of translating complex technical issues for non-technical stakeholders.
  </li>
  <li>
   High ownership mindset with the ability to perform under pressure in a challenging environment.
  </li>
  <li>
   Effective stakeholder management and a collaborative team player.
  </li>
  <li>
   Passion for continuous learning and staying current with the evolving threat landscape.
  </li>
 </ul>
</div>


Senior Associate – Security Operation Centre

Binance

<div>
 <div>
  <b>Responsibilities</b>
  <ul>
   <li>Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.</li>
   <li>Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).</li>
   <li>Configure DLP policies to prevent data exfiltration while minimizing false positives.</li>
   <li>Monitor, analyze, and tune alerts and incidents for continuous improvement.</li>
   <li>Lead investigations of DLP incidents and insider threats,</li>
   <li>Conduct threat hunting and forensic analysis of data exfiltration attempts.</li>
   <li>Integrate DLP monitoring into broader SOC workflows and incident response playbooks.</li>
   <li>Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).</li>
   <li>Develop automation scripts, APIs, regexes and integrations to enhance detection and response.</li>
   <li>Explore AI/LLM-driven methods for anomaly detection and response efficiency.</li>
   <li>Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).</li>
   <li>Support audits and regulatory reviews related to data protection.</li>
   <li>Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.</li>
  </ul>
 </div>
</div>

DLP & Incident Response Engineer

OverviewOT Lead Analyst Sector Domain is the liaison officer of the sector in OT SOC and vice versa. Communicate activities, decision, etc. to the sector stakeholders.ResponsibilitiesHold and provide all sector specific knowledge for all activities (incident response, threat hunting and etc.)Coordinate mutual efforts between the OT SOC and the sector. For example, mutual incident response investigationEstablishing and maintaining relationships with internal and external stakeholders like suppliers, customers and incident response and security teams.Creating and maintaining a comprehensive understanding of global/sector related cybersecurity risks and market requirements, including regulations and standards.Supporting customer and teams with customer/sector cybersecurity questions and questionnairesRepresenting OT SOC as a thought leader and expert in customer discussions regarding cybersecurity and sector related discussionsPerform assessment to monitor the adherence to applicable cybersecurity policies and industry best practicesActively contributing to identify, manage and reduce cyber security risks.Support and to drive internal cybersecurity awareness and training programs.Active involvement in management discussionsMust be an articulate and persuasive leader who is able to communicate security related concepts to a broad range of technical and non-technical staff.Coordinated efforts in line with the bigger picture to maximize the overall value of SOC delivery.Collaborate and build relationship with internal and external parties to support SOC operations and sector related initiativesSelf-motivated, curious, knowledgeable pertaining to information security news and current events.Highly result oriented and able to work independently.Ability to build relationships and interact effectively with internal and external parties.Comfortable with high-tech work environment, and constant learning of new tools and innovationsQualificationsOverall 8+ years  experience working in a large-scale OT environment with focus on Information Security.Overall 8+ years  experience working in specific sector (Healthcare, Critical Infrastructure, Transportation, Finance, UtilitiesMinimum 5 years  experience in Information and Cyber Security.Any Bachelor s Degree in Computer Science or Information TechnologyISC2 Certified Information Systems Security Professional (CISSP) and/orGIAC CertificationSector related certification(s)Possess strong people and process management skills.Proven skills in program management including project initiation, scoping, resourcing, scheduling, budgeting, risk management and communication.Excellent interpersonal, presentation and facilitation skills.Good analytical, technical, written and verbal communication skills.Ability to multi-task in a fast paced and demanding work environment.Ability to lead team with good co-ordination skills.Good working knowledge of Office tools.Ability to work effectively in a team and to lead a team to accomplish SOC goals and objective.Knowledge of current and emerging threats/threat vectors.Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.Knowledge of new and emerging information technology (IT) and information security technologies.Knowledge of Information security GRC, standards, best practices and concepts.Knowledge of applicable Information and cyber security related laws and regulations.Knowledge of disaster recovery and continuity of operations plans.Knowledge of Cyber kill chain and other frameworks such as NIST, ISO, SANS, etc.Knowledge of defense-in-depth techniques and of different classes of attacks (e.g., passive, active, insider, close-in, distribution)Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation state sponsored], and third generation [nation state sponsored]).Skill in recognizing and categorizing types of vulnerabilities and associated attacks.Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).Knowledge of hacking methodologies in Windows or Unix/Linux environment Surveillance and of penetration testing principles, tools, and techniques (e.g., metasploit, neosploit).Knowledge of programming language structures and logic.Knowledge of webmail collection, searching/analyzing techniques, tools, and cookies Web Technology.Skill in performing damage assessments.Skill in performing packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump)Knowledge of malware and malware analysis tools (e.g., Olly Debug, Ida Pro).Skill in analyzing anomalous code as malicious or benign.Knowledge of types and collection of persistent data and of basic concepts and practices of processing digital forensic data.Skill in analyzing memory dumps to extract information and in analyzing volatile data and identifying obfuscation techniques.Knowledge of forensic processes for seizing and preserving digital evidence (e.g., chain of custody).Skill in preserving evidence integrity according to standard operating procedures or national standardsKnowledge of OT Sensors ( Nozomi, Dragos, Claroty )Knowledge.

Lead Analyst - Sector Domain

Explore 302+ Soc analyst in Dubai this October. Find roles across top companies and apply now to boost your career.