SOC Level 3 Analyst

About the role

We are looking for an experienced SOC Level 3 Analyst to join the Cybersecurity Operations & Threat Management team in Dubai. The role will focus on advanced threat hunting, incident response, digital forensics and the continuous improvement of SOC processes.

Key responsibilities

• Lead proactive threat hunting across enterprise networks, endpoints, cloud environments and security infrastructure.
• Act as the highest technical escalation point for critical (P1) cybersecurity incidents and conduct advanced investigations, root‑cause analysis and post‑incident reviews.
• Perform digital forensic investigations, malware analysis and reverse engineering on endpoints, memory, disk, network and cloud assets.
• Develop, optimise and maintain SIEM detection rules, correlation logic and threat‑hunting use cases, integrating threat‑intelligence feeds and IOCs.
• Mentor SOC Level 1 and Level 2 analysts, support process improvement, and prepare technical and executive reports on major incidents.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics or a related field.
• Minimum 5 years of experience in a Security Operations Center, DFIR, threat hunting or incident response.
• Professional certifications such as CISSP, GCFA, GCIH, GREM, GNFA or OSCP are highly preferred.

Required skills

• Hands‑on experience with SIEM platforms (Microsoft Sentinel, Splunk, IBM QRadar).
• Proficiency with EDR solutions (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne).
• Strong knowledge of digital forensics, malware analysis, MITRE ATT&CK, Active Directory, Windows/Linux administration.
• Cloud security experience on AWS, Azure or GCP.
• Scripting in Python, PowerShell or Bash.