Cybersecurity Analyst

Bare Cove Technology Limited; Dubai; On-site; AED 279,000 - 469,000; Full time

Job summary

Bare Cove Technology is seeking a Cyber Security Analyst (Blue Team & Security Assessment) to join our Dubai-based cybersecurity team. You will perform assessments, audits, vulnerability management, and cloud security reviews for clients across financial services and enterprise sectors.

The role combines technical security expertise with consulting and client-facing responsibilities, working with Microsoft 365, Azure, AWS, and other cloud platforms to strengthen security posture and resilience.

Qualifications

• Experience in cybersecurity assessments, security operations, incident response, vulnerability management, audits or consulting.
• Solid understanding of defensive security controls and industry best practices.
• Experience reviewing controls across cloud, network, endpoint, and identity platforms.
• Familiarity with M365, Azure, Google Cloud, AWS, SIEM and EDR tech.
• Experience analyzing incidents, alerts, phishing, and threat intel.
• Strong analytical and problem-solving skills.
• Able to work autonomously in a fast-paced, agile environment.
• English communication skills; Cantonese/Mandarin/Arabic a plus.

Responsibilities

• Conduct cybersecurity assessments and security reviews across client environments.
• Perform security audits and gap assessments against standards and regulations.
• Review client security architectures across network, cloud, endpoint and identity controls.
• Assess effectiveness of existing controls and identify improvement opportunities.
• Carry out vulnerability assessments and validate remediation activities.
• Analyze security alerts, phishing, malware incidents and threats.
• Support incident investigations and remediation actions.
• Review cloud security configs (M365, Azure, AWS, Google Cloud).
• Develop remediation roadmaps and practical recommendations.
• Prepare detailed reports, executive summaries, risk registers, and findings.
• Coordinate with internal and client teams for remediation closure.
• Provide cybersecurity advisory guidance and risk reduction strategies.
• Assist maturity improvement initiatives and security transformation projects.
• Support compliance with ISO 27001, NIST CSF, CIS Controls, MAS TRM, GDPR, PDPA.

Skills

Cybersecurity Assessments

Security Operations

Incident Response

Vulnerability Management

Security Audits

Cloud Security

Microsoft 365

Azure

AWS

SIEM/EDR

Threat Intelligence

English Communication

Client-facing

Tools

Microsoft 365 SIEM/EDR tools

Azure

Google Cloud

AWS

Sentinel

Defender XDR

CrowdStrike

Splunk

QRadar

Rapid7

PowerShell

Python

Job description

ABOUT THE COMPANY

Bare Cove Technology (BCT) is an award-winning IT and cybersecurity solutions provider. Our team is made up of proven leaders in the fields of cybersecurity, software development, cloud technologies, and IT infrastructure and design. We support the top asset managers across the globe, helping our clients meet the evolving expectations of institutional investors and global regulators.

Bare Cove Technology is in a rapid-growth phase and onboarding new clients across Hong Kong, Singapore, Australia, London and Dubai. To support our continued growth, BCT is looking to hire several new members for the team.

ABOUT THE ROLE

Bare Cove Technology is looking for a Cyber Security Analyst (Blue Team & Security Assessment) to join our growing cybersecurity team. The successful candidate will help clients assess, improve, and strengthen their cybersecurity posture through security assessments, cyber audits, vulnerability management, cloud security reviews, incident investigations, and security improvement initiatives.

The role combines technical cybersecurity expertise with consulting and client-facing responsibilities. The successful candidate will work closely with clients across the financial services, asset management, banking, and enterprise sectors to identify security risks, evaluate existing controls, and deliver practical recommendations that improve security maturity and resilience.

This role will be based in BCT’s DIFC (Dubai) office.

Job Duties:

• Conduct cybersecurity assessments, security health checks, and security reviews across client environments.
• Perform security audits and gap assessments against industry standards, regulatory requirements, and cybersecurity best practices.
• Review client security architectures, including network, cloud, endpoint, identity, email, and infrastructure security controls.
• Assess the effectiveness of existing security controls and identify opportunities to improve clients' security posture.
• Perform vulnerability assessments and validate remediation activities.
• Analyse security alerts, phishing attacks, malware incidents, endpoint detections, and emerging cyber threats.
• Support incident investigation and response activities by identifying root causes and recommending corrective actions.
• Review and assess Microsoft 365, Azure, AWS, and other cloud security configurations.
• Develop prioritized remediation roadmaps and practical recommendations to address identified risks and weaknesses.
• Prepare detailed technical reports, executive summaries, risk registers, and audit findings for clients.
• Coordinate with internal and client teams on the remediation and closure of identified findings.
• Provide cybersecurity advisory services and guidance to clients on security best practices and risk reduction strategies.
• Assist clients with cybersecurity maturity improvement initiatives and security transformation projects.
• Support compliance initiatives relating to frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, MAS TRM, SFC, DFSA, GDPR, PDPA and other applicable standards.
• Collaborate with clients to understand their security needs and provide tailored cybersecurity solutions.
• Stay up-to-date with the latest cybersecurity threats, technologies, industry trends, and regulatory developments.

SKILLS AND QUALIFICATIONS

Required Skills and Qualifications:

• Prior experience in cybersecurity assessments, security operations, incident response, vulnerability management, security audits, or cybersecurity consulting.
• Strong understanding of cybersecurity principles, defensive security controls, and industry best practices.
• Experience reviewing and assessing security controls across cloud, network, endpoint, and identity platforms.
• Familiarity with Microsoft 365, Azure, Google Cloud, AWS, endpoint security, email security, SIEM, and EDR technologies.
• Experience analyzing cybersecurity incidents, security alerts, phishing attacks, and threat intelligence.
• Strong analytical, troubleshooting, and problem-solving skills.
• Proven ability to function in a self-directed environment with high levels of attention to detail.
• Must excel in a fast-paced, agile environment where critical thinking and strong problem-solving skills are required for success.
• Innovative thinker who is positive, proactive, and readily embraces change.
• Ability to always handle clients professionally.
• Willing to work outside standard business hours when necessary.
• Strong written and verbal English communication skills are required; Cantonese, Mandarin, or Arabic would be an advantage.
• Good Team Player.

Preferred Skills and Qualifications:

• Relevant certifications such as Security+, CISM, CRISC, CEH, CISSP, CREST, SC-200, SC100, or similar are preferred.
• Experience with cloud security (M365, AWS, Azure, Google Cloud, etc.).
• Experience conducting cybersecurity audits, risk assessments, and compliance reviews
• Knowledge of security monitoring technologies including Sentinel, Defender XDR, CrowdStrike, Splunk, QRadar, Rapid7, or similar platforms.
• Knowledge of scripting languages such as Python or PowerShell.
• Familiarity with regulatory requirements and compliance standards