Contract Security Operations & Incident Response Specialist

VaporVM; Dubai; On-site; AED 180,000 - 320,000; Full time

Job summary

VaporVM Ltd. is seeking an experienced security engineer to monitor and respond to security events across SIEM, EDR and NDR platforms.

You will correlate logs from network, endpoints, cloud and applications to detect malicious activity and support post-incident analysis. The role involves triage, containment, eradication and recovery, with a focus on reducing false positives through alert tuning and developing robust detection logic.

Qualifications

• 4–7 years of experience in a similar role.
• Experience with security monitoring, incident response and forensics.
• Proficiency in log correlation across network, endpoint, cloud and applications.
• Ability to develop SIEM use cases and tune alerts to reduce false positives.
• Experience in malware analysis and reverse engineering, with tooling proficiency.

Responsibilities

• Monitor SIEM/EDR/NDR for suspicious activity and security events.
• Perform triage, investigation, containment, eradication and recovery of incidents.
• Correlate logs from network, endpoint, cloud and app sources to detect threats.
• Develop SIEM use cases and alert tuning to reduce false positives.
• Support digital forensics and post-incident analysis.

Skills

Security monitoring

Incident response

Triage & containment

Forensics

Threat hunting

Threat intelligence

Malware analysis

Reverse engineering

Regulatory reporting

Tools

SIEM

EDR

NDR

Sigma

Snort

YARA

Ghidra

IDA Pro

x64dbg

Cuckoo Sandbox

Job description

VaporVM Ltd. is seeking an experienced security engineer to monitor and respond to security events across SIEM, EDR and NDR platforms.

You will correlate logs from network, endpoints, cloud and applications to detect malicious activity and support post-incident analysis. The role involves triage, containment, eradication and recovery, with a focus on reducing false positives through alert tuning and developing robust detection logic.