SOC Engineer

About the role

We are seeking a seasoned SOC engineer to join our Security Operations Center in Abu Dhabi. In this role, you will leverage your expertise in security monitoring and detection to identify, analyze, and respond to security threats. You will collaborate with cross-functional teams to enhance our security posture and ensure the protection of critical assets.

Responsibilities

• Continuously monitor security alerts and logs from SIEM and EDR platforms.
• Triage and investigate security incidents, performing root cause analysis.
• Develop, tune, and deploy detection rules and correlation use cases in the SIEM.
• Conduct threat hunting activities to proactively identify potential threats.
• Collaborate with the incident response team to contain and remediate security events.
• Perform forensic analysis on compromised systems as needed.
• Maintain and optimize SOC tools, including SIEM, EDR, and related security technologies.
• Produce clear and actionable incident reports and threat intelligence briefs.
• Stay up to date with the latest threat landscapes and attack techniques.

Required qualifications

• 6–8 years of hands-on experience in a SOC environment.
• Proven expertise with SIEM platforms, including deployment, rule writing, and log analysis.
• Strong experience with EDR solutions, including detection tuning and endpoint forensics.
• Deep understanding of security detection engineering and incident response methodologies.
• Proficiency in log analysis, packet analysis, and host-based forensics.
• Familiarity with the MITRE ATT&CK framework and threat modeling.
• Solid networking fundamentals, including TCP/IP, firewalls, and IDS/IPS.
• Excellent analytical and problem-solving skills.
• Effective communication skills in English.

Preferred qualifications

• Relevant certifications, such as GCIA, GCIH, GCFE, CISSP, or CRISC.
• Experience with cloud security monitoring (AWS, Azure, or GCP).
• Scripting skills in Python, PowerShell, or Bash for automation and tooling.
• Knowledge of threat intelligence platforms and feed integration.
• Hands-on experience with vulnerability management and penetration testing.
• Arabic language proficiency.
• Experience working in regulated environments, such as finance or government.

Position details

Location: Abu Dhabi, UAE Industry: Banking Experience required: 6+ years