Senior Security Analyst – 24x7 SOC

About the role

Core42 is seeking a senior Security Analyst to anchor the technical depth of its 24x7 Security Operations Centre in Abu Dhabi. The role involves detecting, triaging, investigating and responding to security incidents across a private‑cloud platform that supports enterprise services.

Key responsibilities

• Monitor security alerts in Splunk and investigate incidents across the private‑cloud platform.
• Lead full‑lifecycle incident response, including containment, eradication, recovery and post‑incident review.
• Develop and tune Splunk correlation searches, dashboards and alerts to improve detection quality.
• Conduct threat‑hunting missions using MITRE ATT&CK and translate findings into durable detections.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field, or equivalent professional experience.
• 5‑8 years of experience in security operations or SOC monitoring, with at least 2 years in a senior role.
• Proven hands‑on experience with Splunk Enterprise/Cloud and advanced SPL development.

Required skills

• Splunk (Enterprise, Cloud), advanced SPL, dashboard and correlation search creation.
• Cribl Stream/Edge for log routing, parsing and enrichment.
• Elastic Security (EDR) and Corelight (NDR) for endpoint and network detection.
• MITRE ATT&CK framework, Cyber Kill Chain, Diamond Model.
• Strong networking knowledge (TCP/IP, DNS, HTTP/S, firewalls, IDS/IPS).
• Windows and Linux operating systems.
• Scripting in Python, Bash or PowerShell.
• Familiarity with OpenStack, Red Hat OpenShift, ServiceNow or Jira for incident tracking.

What we offer

• Competitive salary package based on experience.
• Performance‑based annual bonus.
• Discount cards (Esaad, Fazaa) for a wide range of services.
• Comprehensive family health insurance covering medical, dental, vision and life.
• Access to premium learning platforms for continuous development.