Cyber Security Engineer

NorthBay Solutions; Abu Dhabi; On-site; AED 270,000 - 480,000; Full time

Job summary

NorthBay Solutions is seeking a Cyber Security Specialist (SOC / Incident Response) in the UAE. This hands-on role emphasizes SIEM monitoring, incident triage, EDR operations, and coordinating vulnerability management within ISO 27001, SOC 2, and PCI/DSS frameworks.

You will work with cross-functional teams across hybrid/on-prem environments to ensure timely detection, containment, and root-cause analysis, while maintaining incident response playbooks and high-quality reporting.

Qualifications

• 7-9 years of experience in SOC / Cyber Security Operations / Incident Response.
• Hands-on SIEM operations: alerts, dashboards, reporting.
• Strong EDR tooling experience and endpoint investigation basics.
• Understand incident response lifecycle and operational docs.
• Experience coordinating remediation with cross-functional teams in hybrid/on-prem.
• Knowledge of ISO 27001, SOC 2 and PCI/DSS control expectations.

Responsibilities

• Monitor security events using SIEM; perform alert triage, correlation validation and escalation.
• Lead incident response activities: triage, containment coordination, evidence capture, root-cause support.
• Operate EDR tooling: policy management, alert handling, containment actions, investigations.
• Coordinate vulnerability management: scanning, triage, remediation tracking, verification.
• Perform threat hunting and develop detections based on patterns and incidents.
• Maintain incident response playbooks, SOPs and case reports with high-quality documentation.
• Support ISO 27001, SOC 2, PCI/DSS compliance through evidence collection and control execution.
• Coordinate with platform, network, and app teams to resolve security events within timelines.

Skills

SOC Operations

SIEM Operations

EDR Tools

Incident Response

Hybrid/On-Prem Environments

ISO 27001

PCI DSS

Job description

Job Title: Cyber Security Specialist (SOC / Incident Response)

Experience: 7-9 Years
Location:UAE
Employment Type: Full-Time

Job Summary

We are seeking a Cyber Security Specialist to support day-to-day cybersecurity operations for a large enterprise customer in the UAE. This role is operational and hands-on, focusing on SIEM monitoring, incident triage/response, EDR operations, vulnerability management coordination, and maintaining compliance-aligned security operations in line with ISO 27001, SOC2, PCI/DSS, etc.

Key Responsibilities

• Monitor and analyze security events using SIEM, including alert triage, correlation validation, and escalation handling
• Execute incident response activities: triage, containment coordination, evidence capture, and support for root-cause analysis
• Operate and manage EDR tooling: policy management, alert handling, containment actions, and endpoint investigation support
• Support vulnerability management execution: scanning coordination, triage, remediation tracking, and verification
• Perform basic threat hunting and proactive detection improvements based on observed patterns and recurring incidents
• Maintain incident response playbooks, operational SOPs, and case documentation with high-quality reporting
• Support ISO 2700, SOC 2, PCI/DSS operational compliance through evidence collection, reporting, and control execution
• Coordinate with platform, network, and application teams to resolve security events within defined timelines and processes

Required Skills & Qualifications

• 7-8 years of experience in SOC / Cyber Security Operations / Incident Response
• Strong hands-on experience with SIEM operations (alerts, use-cases, dashboards, reporting)
• Strong working experience with EDR tools and endpoint investigation fundamentals
• Practical understanding of incident response lifecycle and operational documentation discipline
• Experience coordinating remediation with cross-functional teams in hybrid/on-prem environments
• Strong knowledge of ISO 27001, SOC 2, PCI/DSS operational control expectations (logging, access, incident handling, evidence)

Preferred Certifications

• CompTIA Security+, CySA+, CEH
• CISSP or CISM

PCI DSS / Payment Security:

• PCIP (ISA) - PCI Professional (Internal Security Assessor)
• Qualified Security Assessor (QSA) (where applicable/available)

Incident / Detection (strong alignment with PCI monitoring requirements):

• GIAC certifications (GCIA, GCIH, GCED)
• AWS Certified Security - Specialty
• AWS Certified Solutions Architect - Associate
• Microsoft Azure Security Engineer Associate (AZ-500)

Good to Have

• Telecom, Government or regulated sector experience in security operations
• Familiarity with structured detection frameworks (e.g., MITRE ATT&CK) and improved alert engineering
• Scripting/automation exposure for reporting and operational efficiency