Cybersecurity Engineer – Managed XDR (mXDR)

About the role

The Onsite Managed XDR (mXDR) Engineer will serve as the primary cybersecurity operational interface between a telecom client in Dubai and the Managed Security Operations Center (SOC). The role ensures effective monitoring, detection, response coordination, and continuous improvement of the client’s security posture.

Key responsibilities

• Act as the single point of contact for all security operations at the client site.
• Monitor security alerts escalated from the SOC and perform L1/L2 triage.
• Coordinate incident response with SOC, IT, and business teams to meet SLA commitments.
• Fine‑tune SIEM/XDR detection rules, onboard new log sources, and reduce false positives.
• Prepare daily, weekly and monthly security reports and track KPIs.
• Engage with client IT, network and application teams, providing security best‑practice advice.
• Leverage threat intelligence feeds, support threat hunting and recommend security improvements.
• Identify detection gaps, support automation (SOAR) and enhance SOC maturity.

Required profile

• Hands‑on experience in a Managed Security Services Provider (MSSP) environment.
• Proven track record in security operations, incident response lifecycle, network security, endpoints and identity security.
• Experience in an onsite, client‑facing role, preferably within the telecom sector.

Required skills

• SIEM platforms: Microsoft Sentinel, Splunk, QRadar.
• XDR/EDR tools: Microsoft Defender, CrowdStrike.
• Strong knowledge of MITRE ATT&CK framework, log analysis and correlation.
• Understanding of network security, endpoint protection and identity security concepts.