Cyber Security Specialist – SOC & Incident Response

About the role

We are seeking a Cyber Security Specialist to support day‑to‑day cybersecurity operations for a large enterprise customer in the UAE. The role is operational and hands‑on, focusing on SIEM monitoring, incident triage/response, EDR operations, vulnerability management coordination, and maintaining compliance‑aligned security operations.

Key responsibilities

• Monitor and analyze security events using SIEM, including alert triage, correlation validation, and escalation handling.
• Execute incident response activities: triage, containment coordination, evidence capture, and support for root‑cause analysis.
• Operate and manage EDR tooling: policy management, alert handling, containment actions, and endpoint investigation support.
• Support vulnerability management execution: scanning coordination, triage, remediation tracking, and verification.
• Perform basic threat hunting and proactive detection improvements based on observed patterns and recurring incidents.
• Maintain incident response playbooks, operational SOPs, and case documentation with high‑quality reporting.
• Support ISO 27001, SOC 2, PCI/DSS operational compliance through evidence collection, reporting, and control execution.
• Coordinate with platform, network, and application teams to resolve security events within defined timelines and processes.

Required profile

• 7–8 years of experience in SOC / Cyber Security Operations / Incident Response.
• Strong hands‑on experience with SIEM operations (alerts, use‑cases, dashboards, reporting).
• Strong working experience with EDR tools and endpoint investigation fundamentals.
• Practical understanding of the incident response lifecycle and operational documentation discipline.
• Experience coordinating remediation with cross‑functional teams in hybrid/on‑prem environments.
• Strong knowledge of ISO 27001, SOC 2, PCI/DSS operational control expectations (logging, access, incident handling, evidence).

Required skills

• SIEM
• EDR tools
• Vulnerability management
• Incident response
• ISO 27001
• SOC 2
• PCI/DSS
• MITRE ATT&CK framework
• Scripting/automation for reporting and operational efficiency