Cyber Security Lead

About the role

We are looking for a hands‑on Cyber Security Lead to own the technical detection and response capabilities of our organization. Based in Dubai, you will work directly in the security consoles, investigate incidents, and drive automation using Microsoft security tools and AI technologies.

Key responsibilities

• Lead investigations and act as incident commander for critical alerts across Microsoft Sentinel and the full Microsoft Defender XDR suite.
• Write, tune and run advanced KQL queries for hunting, detection and analytics rule creation.
• Design, build and maintain SOAR automation with Sentinel playbooks and Azure Logic Apps.
• Conduct threat‑hunting, purple‑team exercises, tabletop drills and post‑incident reviews, translating findings into technical improvements.
• Pilot and productionise practical AI use cases that enhance detection, triage, investigation and response, using Microsoft Security Copilot and LLM APIs.
• Validate and improve outsourced SOC, vulnerability management and cloud‑security services.

Required profile

• Deep technical expertise in security operations with a bias toward doing the work yourself.
• Strong analytical mindset and ability to translate complex data into actionable security measures.
• Experience leading incident response and coordinating multi‑disciplinary teams.

Required skills

• Microsoft Sentinel
• Microsoft Defender XDR (Endpoint, Office 365, Cloud, Identity)
• Kusto Query Language (KQL)
• Azure Logic Apps & Azure cloud services
• Zscaler
• Microsoft Purview
• AI/LLM integration (Microsoft Security Copilot, APIs)
• SOAR automation
• MITRE ATT&CK framework
• Threat hunting and purple‑team activities