CSOC Operational Engineer - Level 2

About the role

Emirates' Cybersecurity team protects its digital assets by monitoring threats, responding to incidents, managing vulnerabilities and ensuring compliance with security policies and regulations. The CSOC Operational Engineer - Level 2 performs advanced monitoring, analysis and investigation of complex security incidents, provides technical guidance to Level 1 engineers, validates AI- and automation-supported findings and coordinates with escalation specialists.

Key responsibilities

• Guide Level 1 engineers and the decision support system so that diagnosis is correct and approved AI and automation are used effectively.
• Ensure escalated incidents, service requests and control issues are resolved within applicable SLAs.
• Maintain clear, accurate and auditable documentation, operational logs and handovers for complex incidents and control decisions.
• Monitor threat, vulnerability, service-health and control-performance data and initiate proportionate action.
• Analyse cyber threats, incidents, control failures and identity-related risks, validate AI or automation findings and recommend actions.
• Review triage and control handling by Level 1 engineers or automation, ensuring accurate closure or escalation.
• Create and maintain operational procedures, automation playbooks, knowledge-base content and approved automation workflows.

Required profile

• Degree or Honours (12+3 or equivalent) in Information Technology.
• 3+ years of Cybersecurity Operations experience.
• GIAC Certified Incident Handler (GCIH) or equivalent certification.

Required skills

• Advanced knowledge of CSOC detection, monitoring, incident response and operational workflows.
• Strong working knowledge of enterprise security platforms used for detection and response.
• Knowledge of infrastructure, cloud, endpoint, server, operating-system and network security controls.
• Knowledge of protocol, web-service and database security concepts.
• Practical knowledge of defence-in-depth, zero-trust and operational-resilience principles, including basic scripting and approved automation or AI decision-support systems.
• Ability to triage alerts by risk, urgency and impact, make decisions within delegated authority and communicate findings clearly.

What we offer

• Tax-free salary.
• Travel benefits exclusive to the industry, including discounts on flights and hotel stays worldwide.