business analyst Jobs in Dubai United Arab Emirates

business analyst

data analyst Jobs in Dubai United Arab Emirates

data analyst

financial analyst Jobs in Dubai United Arab Emirates

financial analyst

product analyst Jobs in Dubai United Arab Emirates

product analyst

senior business analyst Jobs in Dubai United Arab Emirates

senior business analyst

soc analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution.<br> </li>
 <li>
<i> </i> 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.<br> </li>
 <li>
<i> </i> 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation.<br> </li>
 <li>
<i> </i> 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research.<br> </li>
 <li>
<i> </i> 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture.<br> </li>
 <li>
<i> </i> 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt.<br> </li>
 <li>
<i> </i> 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations.<br> </li>
 <li>
<i> </i> 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems.<br> </li>
 <li>
<i> </i> 
 Ensure that corporate data and technology platform components are safeguarded from known threats.<br> </li>
 <li>
<i> </i> 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools<br> </li>
 <li>
<i> </i> 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources.<br> </li>
 <li>
<i> </i> 
 Understanding and implementing the SOC processes and procedures.<br> </li>
 <li>
<i> </i> 
 Follow standard operating procedures for detecting, classifying, and reporting.<br> </li>
 <li>
<i> </i> 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff.<br> </li>
 <li>
<i> </i> 
 Communicate effectively with customers, team-mates, and management.<br> </li>
 <li>
<i> </i> 
 Provide input on tuning and optimization of security systems.<br> </li>
 <li>
<i> </i> 
 Follow ITIL practices regarding incident, problem and change management.<br> </li>
 <li>
<i> </i> 
 Document and maintain customer build documents, security procedures and processes.<br> </li>
 <li>
<i> </i> 
 Stay up to date with current vulnerabilities, attacks, and countermeasures.<br> </li>
 <li>
<i> </i> 
 Reviews the latest alerts to determine relevancy and urgency.<br> </li>
 <li>
<i> </i> 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.<br> </li>
 <li>
<i> </i> 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.)<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 3+ years of experience of network/security architecture or operations experience<br> </li>
 <li>
<i> </i> 
 Experience working on specific SOC/SIEM platforms<br> </li>
 <li>
<i> </i> 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm<br> </li>
 <li>
<i> </i> 
 Experience in SOAR technologies   Demisto, Cybersponse, FortiSOAR, Swimlane<br> </li>
 <li>
<i> </i> 
 Excellent experience in MDR or EDR<br> </li>
 <li>
<i> </i> 
 Experience in using security tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Experience in defensive technologies   NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files.<br> </li>
 <li>
<i> </i> 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GIAC Certified Intrusion Analyst (GCIA)<br> </li>
 <li>
<i> </i> 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC<br> </li>
 <li>
<i> </i> 
 GIAC Certified Incident Handler (GCIH) issued by GIAC<br> </li>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH) issued by EC-Council<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

DICETEK LLC

<ul><li>Resource should have in-depth knowledge and experience in cloud security</li><li>Resource must have in-depth knowledge in Incident Response Process &amp; Procedure</li><li>Resource must be well experienced in Security Event Log Analysis</li><li>Resource must have Network Traffic Analysis skill</li><li>Resource must have worked in major Antivirus/Malware solutions</li><li>Resource must have experience in Intrusion Detection/Prevention systems</li><li>Resource should have experience in administering in Security Incident and Event Management Systems (SIEM) tool</li><li>Resource should have rich knowledge in Firewalls</li><li>Resource must have Advanced Persistent Threat handling capability</li><li>Resource must have experience in Web Application Firewall configurations</li><li>Resource should have good experience in Penetration testing tools and techniques</li><li>Resource should aware about vulnerability management and patching</li><li>Resource should have extensive knowledge in Threat intelligence</li></ul>

SOC Analyst

Dicetek

A leading IT services company in the UAE is seeking an experienced L2 SOC Analyst to enhance its security operations. The ideal candidate must possess in-depth knowledge of cloud security, incident response, and a variety of security management tools. Responsibilities include managing security incidents, analyzing logs, and ensuring robust network protection. This contract position offers a dynamic work environment with opportunities for professional growth.

L2 SOC Analyst: Cloud Security & Threat Intel (Contract)

Paramount Assure

<div> <p>L2 SOC Analyst   </p> <p> <br> </p> <p>Compromise Assessment &amp; Incident Response (with SIEM Admin Knowledge) </p> <p> <br> </p> <p> <strong>Role Overview</strong>: We are seeking a skilled L2 Security Analyst to support our MSSP operations team. The ideal candidate will possess a solid background in incident response and compromise assessment, as well as administration skills across various security platforms. You will work with enterprise clients to identify threats, perform in-depth investigations, and ensure platform reliability. </p> <p> <br> </p> <p> <strong>Location</strong>: Onsite </p> <p> <br> </p> <p> <strong>Key Responsibilities</strong>: Security Monitoring &amp; Incident Handling Analyze alerts from SIEM/EDR and perform triage to validate incidents. Provide containment and eradication support in real-time. Correlate logs and conduct root cause analysis using various telemetry sources. Compromise Assessment &amp; Generate IR reports, dashboards, and executive summaries. Lead endpoint and network-based compromise assessments for clients. Administrative &amp; Platform Support and maintain the health of SIEM, EDR, and firewall integrations. Troubleshoot ingestion issues and optimize detection logic. Ensure secure onboarding of log sources via APIs or agent-based collectors. Threat Intel &amp; Document IOCs and provide actionable recommendations. </p> <p> <br> </p> <p> <strong>Requirements</strong>: Technical Expertise, 5 7 years of experience in SOC/IR roles. Strong command of MITRE ATT&amp;CK, Windows/Linux logs, and AD attacks. Proficient with SIEMs (QRadar, ELK, Sentinel), and forensic/packet tools. Familiarity with scripting (PowerShell/Python). Administrative Knowledge &amp; Experience managing SIEM infrastructure. Understanding of firewall policies, email security, and cloud logs. Ability to configure connectors, fine-tune rules, and automate integrations.</p></div>

SOC L2

Confidential Company

<p>Conduct periodic security audits &amp; assessments (internal &amp; external)</p><ul><li>Review security policies, procedures, standards, and controls</li><li>Assess and validate existing technical and operational security controls</li><li>Risk assessments: identify, evaluate, and prioritize security risks</li><li>Assess maturity of security controls, identify gaps vs frameworks (ISO 27001, NIST, CIS, etc.)</li><li>Review incident response readiness, playbooks, and past incident analyses</li><li>Monitor SOC / threat detection / alerting processes (if applicable) and understand SIEM, IDS/IPS, incident response, threat hunting</li><li>Provide gap analysis against standards (e.g. ISO 27001, NIST CSF, SOC 2)</li><li>Prepare audit findings reports, articulate recommendations and roadmap</li><li>Conduct vendor / third-party security reviews</li><li>Produce findings reports, guide remediation, and follow up to closure</li><li>Review network, endpoint, identity, access, encryption controls, etc</li><li>Mentor internal security staff (if any)</li><li>Stay updated with evolving threats, regulatory changes</li></ul><p><strong>Minimum Qualifications</strong></p><ul><li>Bachelor degree in Computer Science, Information Security, Engineering or equivalent</li><li>5-7 years in cybersecurity / information security roles</li><li>Experience in a SOC environment or with managed detection &amp; response services</li><li>Hands-on experience in security audits and assessments</li><li>Strong technical skills: networking, logging &amp; monitoring, vulnerability management</li><li>Certifications: ISO 27001 LA, ISO 27001 LI, CISA, CISSP, CISM, or equivalent</li><li>Experience with major frameworks (ISO 27001, NIST, SOC, etc.)</li><li>Excellent report writing and stakeholder management skills</li><li>Strong ethical standards, confidentiality, and objectivity</li></ul><p><strong>Preferred / Advantageous</strong></p><ul><li>Experience in your industry or regulatory regime</li><li>Experience in cloud security (AWS, Azure, GCP)</li><li>Experience with threat hunting, red teaming, or offensive security</li><li>ISO 27001 Lead Auditor certification</li><li>Experience in privacy / data protection compliance</li></ul><br/><p>Language </p><p>Arabic &amp; English is a must </p><p> </p>

Information Security Consultant / Auditor

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

Dataguardnxt

<p><strong>Role &amp; responsibilities</strong></p> <ul> <li>Collaborate with the sales team to identify customer needs and develop appropriate cybersecurity solution proposals.</li> <li>Prepare and deliver <strong>technical presentations, demonstrations, and proof of concepts (POCs)</strong> for SOC, VAPT, and related security services.</li> <li>Assist in <strong>RFP/RFI responses</strong>, solution documentation, and proposal preparation.</li> <li>Design <strong>end-to-end cybersecurity architectures</strong> leveraging products and services such as SIEM, EDR, SOAR, Threat Intelligence, and Cloud Security.</li> <li>Evaluate and recommend <strong>security tools, frameworks, and methodologies</strong> suitable for client environments.</li> <li>Support account managers in <strong>client meetings and technical discussions</strong> to articulate value propositions.</li> <li>Conduct <strong>requirement analysis and gap assessments</strong> to propose suitable managed security services.</li> <li>Work closely with the SOC, VAPT, and delivery teams to ensure accurate scoping and successful project transition.</li> <li>Stay updated on <strong>emerging cybersecurity trends, threats, and technologies</strong>.</li> <li>Contribute to <strong>marketing collateral, case studies, and technical documentation</strong> when required.</li> </ul>

Presales Engineer-Cybersecurity Solutions

Explore 323+ Soc analyst in Dubai United Arab Emirates this November. Find roles across top companies and apply now to boost your career.