Cybersecurity Analyst: Incident Response & Threat Detection

TALENTMATE; Abu Dhabi; On-site; AED 180,000 - 240,000; Full time

Job summary

EDGE Group's Advanced Concepts division seeks a cybersecurity operations professional in Abu Dhabi to monitor and analyze security events from SIEM, EDR/XDR, and related tools, conduct incident detection, triage, investigation, and response in classified environments.

You will identify cyber threats, perform threat analysis across log sources, support vulnerability management, ensure adherence to NIST SP 800-53 and 800-171, and collaborate with IT to integrate security controls across projects

Qualifications

• Bachelor’s degree in information security, IT, CS or related field.
• 3–5 years in cybersecurity operations, SOC or incident response.
• Hands‑on experience with SIEM, EDR/XDR and log analysis.
• Experience in classified or high-security environments preferred.
• Understanding of cyber threats, attack vectors and MITRE ATT&CK.
• Knowledge of incident response lifecycle and vulnerability management.
• Familiarity with network protocols and security tools.
• Familiarity with vulnerability scanning and patch management.
• Knowledge of NIST SP 800-53 and NIST SP 800-171.
• Certifications: Security+, CySA+, CEH, CISSP (preferred).

Responsibilities

• Monitor and analyze security events and alerts from SIEM, EDR, DLP, and network tools.
• Perform incident detection, triage, investigation and response in classified environments.
• Identify and analyze cyber threats, attack patterns and suspicious activities.
• Conduct threat analysis and correlation across multiple log sources.
• Perform vulnerability analysis and support remediation tracking.
• Investigate unauthorized access, malware infections, and data exfiltration attempts.
• Maintain incident records, reports, and forensic evidence for audit/compliance.
• Ensure adherence to NIST SP 800-53 and 800-171 standards.
• Support tuning and optimization of SIEM use cases and detection rules.
• Improve monitoring capabilities and alert accuracy.
• Collaborate with IT and other departments to integrate security into projects.
• Provide input to risk assessments and security posture improvements.
• Support audits and compliance activities.
• Participate in incident response drills and exercises.
• Perform other responsibilities and duties as assigned.

Skills

Cybersecurity operations

Incident response

Threat analysis

MITRE ATT&CK

Vulnerability management

Education

Bachelor’s degree in information security/IT/CS

Tools

SIEM

EDR/XDR

Job description

EDGE Group's Advanced Concepts division seeks a cybersecurity operations professional in Abu Dhabi to monitor and analyze security events from SIEM, EDR/XDR, and related tools, conduct incident detection, triage, investigation, and response in classified environments.

You will identify cyber threats, perform threat analysis across log sources, support vulnerability management, ensure adherence to NIST SP 800-53 and 800-171, and collaborate with IT to integrate security controls across projects