CSOC Operations Engineer II

Emirates Airlines - Other locations; Abu Dhabi; On-site; AED 240,000 - 420,000; Full time

Benefits offered by this job

Travel benefits

Tax-free salary

Job summary

Emirates Airlines is seeking a CSOC Operational Engineer - Level 2 to join our cybersecurity team. You will monitor threats, investigate complex incidents, and guide Level 1 engineers while validating AI- and automation-supported findings.

You will coordinate with escalation specialists to ensure timely, controlled incident resolution. The role requires 3+ years in cybersecurity operations and a GIAC-certified incident handler (GCIH) or equivalent.

Qualifications

• Degree in Information Technology or related field; 3+ years in Cybersecurity Operations.
• GCIH or equivalent certification.

Responsibilities

• Monitor threats, incidents and control performance; analyze and investigate complex events.
• Provide guidance to Level 1 engineers and validate AI/automation-assisted findings.
• Ensure timely incident resolution within SLAs and maintain auditable documentation.
• Review and improve incident triage, escalation, and handovers; maintain procedures and automation playbooks.
• Communicate findings clearly to technical and non-technical stakeholders.

Skills

CSOC detection

Incident response

Operational workflows

Security platforms

Infrastructure security

Cloud security

Threat monitoring

AI/automation safety

Stakeholder communication

Education

Degree in Information Technology or related field

GIAC Certified Incident Handler (GCIH)

Tools

SIEM platforms

Automation/AI decision-support tools

Job description

Emirates Airlines is seeking a CSOC Operational Engineer - Level 2 to join our cybersecurity team. You will monitor threats, investigate complex incidents, and guide Level 1 engineers while validating AI- and automation-supported findings.

You will coordinate with escalation specialists to ensure timely, controlled incident resolution. The role requires 3+ years in cybersecurity operations and a GIAC-certified incident handler (GCIH) or equivalent.