SOC Analyst

About the role

IFZA Dubai is looking for a SOC Analyst to protect its information systems by identifying, assessing and mitigating security risks. The role covers monitoring, analyzing and responding to security incidents, implementing security measures and ensuring compliance with industry standards and regulations. It suits a proactive, detail-oriented person with strong technical and analytical skills.

Key responsibilities

• Monitor SIEM dashboards (e.g. Microsoft Sentinel) and security alerts in real time, and track and analyze events from tools such as Microsoft Defender
• Identify suspicious activity, anomalies and policy violations, then triage alerts as false positives or true positives
• Review logs, event details, reputation data and indicators of compromise, and escalate confirmed or high-severity incidents to L2/L3 analysts
• Run predefined response actions such as isolating devices, forcing password resets and blocking IPs
• Check IOC hits against threat intelligence, analyze phishing, malware, malicious URLs, credential harvesting and unauthorized access, and identify alert trends
• Create incident tickets and investigation notes, document root cause analysis and remediation recommendations, and generate reports on recurring or trending issues
• Collaborate with the security team and internal IT teams, communicate with users to validate suspicious activity, follow SOPs and contribute to process improvements
• Deliver security awareness training (e.g. password management, phishing prevention) and share educational material on emerging threats
• Stay updated on cyber threats and vulnerabilities, and apply threat intelligence findings to strengthen security posture

Required profile

• Bachelor's degree in engineering, computer science or a related field
• 5-7 years of experience in SOC operations
• At least 3 years of hands-on experience in SOC, blue team or security engineering roles

Required skills

• Proven expertise with Microsoft Sentinel, Microsoft Defender, incident management and compromised recovery
• Solid grasp of TCP/IP, Windows/Linux internals and AWS/Azure security primitives
• Scripting for automation (Python, Bash or PowerShell)
• Familiarity with MITRE ATTACK mapping and threat-hunting methodology
• CompTIA Security+, Microsoft SC-200, CEH, CCNA or CCNP - Security

What we offer

• International team of over 50 nationalities
• 24 annual leave days and annual flight home
• Life insurance plan and medical insurance plan (upgradeable at your own cost)
• Invitations to company functions, staff events and team-building activities
• Learning and development opportunities within a motivated team