Cyber Defense Centre Analyst

About the role

The SOC Analyst will monitor, analyse and investigate security events to protect ADCB’s information systems. You will work within the Group Business Services team, collaborating with infrastructure, network and application teams to ensure continuous cyber‑security protection.

Key responsibilities

• Perform day‑to‑day security monitoring using SIEM and other platforms, identify anomalies, policy violations and indicators of compromise.
• Validate, triage and correlate alerts, distinguishing genuine incidents from false positives.
• Investigate phishing, malicious emails and data‑leakage incidents, coordinating containment actions.
• Raise, classify, prioritize and manage cyber‑security incidents through the full response lifecycle.
• Conduct forensic analysis, determine root cause, attack path and affected assets.
• Coordinate remediation with infrastructure, network, endpoint and application teams.
• Maintain complete incident records, evidence, and documentation.
• Use SOAR to manage incident workflows, case handling and automation.
• Provide regular security reports, metrics and KRIs to stakeholders.

Required profile

• Working knowledge of security event monitoring, log analysis and correlation using SIEM solutions.
• Understanding of cyber‑security incident handling and case management via SOAR platforms.
• Familiarity with firewalls, IDS/IPS, endpoint security, email security, DLP and web security technologies.
• Good grasp of network topologies, TCP/IP, common protocols and traffic analysis fundamentals.
• Knowledge of malware, phishing, botnets, vulnerabilities and indicators of compromise.
• Experience with forensic investigation fundamentals and evidence handling.
• Basic AI awareness for assisted investigation and automation.

Required skills

• SIEM (e.g., QRadar, Splunk, ArcSight)
• SOAR platforms (e.g., Cortex XSOAR, Demisto)
• Security monitoring and detection
• Incident response and forensic analysis
• Phishing and malicious email analysis
• Data leakage monitoring (DLP)
• Firewalls, IDS/IPS, endpoint protection
• Network protocol analysis (TCP/IP)
• Basic AI‑assisted investigation tools

What we offer

• Competitive salary with variable pay plans
• Comprehensive medical, life and personal accident insurance
• Paid leave, leave airfare and children education assistance
• Preferential rates on loans and finance facilities
• Staff discounts and flexible/remote work options