SOC Engineer – Incident Management

About the role

We are looking for a technical SOC Specialist with 3‑5 years of experience to lead incident response and threat detection in our 24/7 Security Operations Center in Abu Dhabi.

Key responsibilities

• Provide continuous 24/7 monitoring of security events, triage alerts from SIEM, Anti‑DDoS and other tools.
• Lead incident response activities including host triage, containment, recovery and remediation.
• Design and implement automated SOAR playbooks to streamline SOC workflows.
• Apply MITRE ATT&CK framework to map attacker techniques and produce threat intelligence reports.
• Perform log analysis, deep‑packet inspection and vulnerability assessments, documenting all actions in the ticketing system.

Required profile

• BSc in Computer Science, Electrical/Computer/Software Engineering or equivalent.
• Minimum 3 years experience in a Security Operations Center handling cyber‑security incidents.
• Hands‑on experience with SIEM platforms (ArcSight, Microsoft Sentinel, etc.) and FortiSOAR.
• Ability to work shifts and overtime as needed.

Required skills

• SOAR playbook development (FortiSOAR)
• Anti‑DDoS solutions
• Log analysis and correlation (KQL)
• Windows and Linux operating systems
• SIEM technologies (ArcSight, Microsoft Sentinel)
• Threat intelligence analysis
• Network protocols and services (Web, Mail, FTP, DNS)
• Tools: Wireshark, IPS, EDR, firewalls, MFA systems