Cyber Security Specialist – Cloud & Incident Response

About the role

The Cyber Security Specialist will protect OSN’s digital assets, content delivery infrastructure, cloud platforms and enterprise systems from cyber threats. Working across AWS, Microsoft Azure, Microsoft 365 and on‑premises environments, you will combine proactive security engineering with real‑time threat detection, incident response and DevSecOps.

Key responsibilities

• Lead end‑to‑end security incident management, from detection through post‑incident review.
• Act as Tier 2/3 escalation point within the SOC and develop incident response playbooks aligned with NIST CSF and ISO 27035.
• Design, implement and tune SIEM detection rules, dashboards and automation in Microsoft Sentinel or Splunk.
• Conduct proactive threat hunting using MITRE ATT&CK and threat‑intel feeds.
• Administer and optimise security technologies such as Microsoft Defender XDR, DLP, PAM, WAF and vulnerability‑management platforms.
• Define and enforce security baselines for AWS, Azure and Microsoft 365, leading CSPM initiatives and Zero‑Trust implementations.
• Review Infrastructure‑as‑Code (Terraform, ARM) for security compliance before deployment.

Required profile

• Several years of hands‑on experience in cybersecurity, incident response and cloud security.
• Ability to investigate complex security incidents independently and produce technical and executive reports.
• Strong collaboration skills to work with infrastructure, cloud, DevOps and business teams.
• Familiarity with UAE regulatory requirements and external MSSP coordination.

Required skills

• AWS security services
• Microsoft Azure security services
• Microsoft 365 security configuration
• Microsoft Sentinel or Splunk SIEM
• Microsoft Defender XDR
• Data Loss Prevention (DLP), Privileged Access Management (PAM), Web Application Firewall (WAF)
• Vulnerability‑management platforms
• Terraform and Azure Resource Manager (ARM) templates
• MITRE ATT&CK framework
• NIST Cybersecurity Framework (CSF) and ISO 27035
• Cloud Security Posture Management (CSPM) and Zero‑Trust architectures