Engineer - SOC Analyst

Midis Group; United Arab Emirates; On-site; AED 180,000 - 300,000; Full time

Job summary

Midis Group seeks a SOC Analyst to detect and analyze security incidents, translating impact to the wider business. You will monitor incident tickets, leverage threat intelligence, and monitor security controls to scope attacks and affected systems.

Responsibilities include gathering threat intel, analyzing files, and performing in-depth incident analysis from L1. You will work with SIEM tools and contribute to client security posture in the UAE.

Qualifications

• Security certificates such as CEH, OSCP, CISSP, CCNP or equivalent.
• Understanding of log formats and protocols (LEEF, CIF, syslog, FTP, log file).
• Working knowledge of SIEM tools (RSA ArcSight, Splunk, QRadar).

Responsibilities

• Detect and analyze security incidents in SOC and translate impact to business.
• Gather, analyze and communicate threat intelligence.
• Analyze files and components using security tools and techniques.
• Investigate L1-initiated incidents and determine root cause.
• Understand network and system behavior and implications.
• Respond to customer queries within defined timelines.
• Direct remediation and recovery efforts.
• Review vulnerability scans and reports.
• Manage and tune security monitoring tools per client needs.
• Promote a professional image of the services function.

Skills

Threat intelligence

Incident response

Log analysis

Network forensics

SIEM tuning

Education

Bachelor's degree in Computer Science or related field

Security certifications: CEH OSCP CISSP CCNP

Tools

RSA ArcSight

Splunk

QRadar

Job description

The SOC Analyst is accountable for detecting security incidents in the SOC and translating security impacts to the wider business S He monitors the security control reviews the incident tickets and leverages emerging threat intelligence to identify affected systems and scope of attack

Main Duties and Responsibilities

• Participate in the gathering analysis and communication of threat intelligence through the intelligence process lifecycle
• Apply technical skills to analyze files and related components using tools and technologies
• Perform in-depth analysis of incidents created from L1 team
• Understand the underlying behavior and implication on a computer and network environment
• Respond to customer queries and concerns within a given timeline to address related concerns
• Determine and direct remediation and recovery efforts
• Understand vulnerability scans and review vulnerability assessment reports
• Manage configure and improve security monitoring tools SIEM among others as per client needs
• Promote a professional image of the company and the professional services function at all times

Position Requirements

• At least one security certificate CEH OSCP CISSP CCNP Sec etc
• Any CCNP Cisco Certified Network Professional or equivalent
• Any non-vendor security certificate CISSP CISM ISO27001 GCIA GCIH GCFA GCFE etc
• Understanding of log formats LEEF CIF and protocols syslog ftp logfie
• Knowledge of security devices such as IDS IPS HIDS HIPS anomaly detection Firewall and Antivirus systems and their log output
• Network forensics network traffic protocols traffic analysis i e Network flows and PCAP
• Working knowledge of SIEM tools such as RSA ArcSight Splunk and QRadar and etc
• EducationBachelor s degree in Computer Science or any other related field
• ExperienceAt least 2 years of relevant experience