CSOC Operations Engineer (Level 2) - Incident Response

The Emirates Group; Dubai; On-site; AED 223,000 - 402,000; Full time

Benefits offered by this job

Tax-free salary

Flight and hotel discounts

Dubai lifestyle

Job summary

The Emirates Group is seeking a CSOC Operational Engineer Level 2 in Dubai to monitor threats, respond to incidents, and coordinate with escalation teams. You will validate AI-driven findings, guide Level 1 engineers, and ensure incidents are resolved within SLAs.

The role requires 3+ years in cybersecurity operations, a GIAC certification, and strong knowledge of enterprise security platforms. On-site in Dubai with an attractive tax-free package and travel benefits.

Qualifications

• Degree in Information Technology and 3+ years of cybersecurity operations experience.
• GIAC Certified Incident Handler (GCIH) or equivalent certification.
• Advanced knowledge of CSOC detection, monitoring, incident response and workflows.
• Knowledge of security controls across infrastructure, cloud, endpoints, servers and networks.
• Familiarity with defence-in-depth, zero-trust, and automation/AI tools.
• Ability to analyze events, assess impact, and recommend actions.
• Ability to triage alerts and escalate per risk and SLA requirements.
• Clear written and verbal reporting for technical and non-technical stakeholders.

Responsibilities

• Guide Level 1 engineers and the decision support system to ensure correct diagnosis and approved actions.
• Ensure timely resolution of escalated incidents and service requests within SLAs.
• Maintain auditable docs, logs, and handovers for complex issues.
• Create and maintain playbooks, automation workflows, and knowledge content.

Skills

CSOC detection

Incident response

Threat monitoring

Operational workflows

Education

Degree in Information Technology

Job description

The Emirates Group is seeking a CSOC Operational Engineer Level 2 in Dubai to monitor threats, respond to incidents, and coordinate with escalation teams. You will validate AI-driven findings, guide Level 1 engineers, and ensure incidents are resolved within SLAs.

The role requires 3+ years in cybersecurity operations, a GIAC certification, and strong knowledge of enterprise security platforms. On-site in Dubai with an attractive tax-free package and travel benefits.