Incident Response-SOC Lead

Dautom; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

Join a forward-thinking company as a Security Operations Specialist, where you will be at the forefront of incident response and security management. In this pivotal role, you will oversee critical processes for detecting and responding to security incidents, ensuring the integrity and safety of client operations. You will collaborate closely with IT teams to develop effective security operation playbooks and enhance logging and monitoring strategies. This is an exciting opportunity to make a significant impact in a dynamic environment, working with a global leader committed to quality and innovation in security practices.

Qualifications

• Experience in managing security incidents and events effectively.
• Strong knowledge of logging and monitoring across infrastructure.

Responsibilities

• Owns the incident response process for security events.
• Drives the strategy for Security Incident and Event Management (SIEM).
• Creates and maintains security operation playbooks.

Skills

Logging

Event Management

Steps Validation

Metrics

Infrastructure Strategy

Security Communication Management

Job description

In this role, you will have the opportunity to work closely with one of our esteemed clients. This client is a global leader known for its commitment to quality and innovation. They have chosen Dautom as their trusted partner for their upcoming projects.

Job Description:

1. Incident Response Process: Owns the critical process steps detection, validation, containment, and communication for security events and incidents such as malware infections, potential compromise, Distributed Denial of Service (DDoS), etc.
2. Security Incident and Event Management (SIEM): Drives our strategy for SIEM and oversees the effectiveness of the technology and process. Involves appropriate tuning, correlation of critical logs, connection to our incident response process, and reporting of relevant metrics.
3. Security Operations Playbooks: Create, maintain, and promote a set of security operation playbooks with Agilents IT teams to effectively trigger and execute the security incident response process.
4. Logging and Monitoring Across Infrastructure & Applications: Manages the current state of logging and monitoring, maintains a vision of ideal state of logging and monitoring, and drives a prioritized roadmap to reduce the gaps.
5. Internal / External Engagements: Act as a SPOC for all escalated client communications and handle the day-to-day operations of the Security Operations Centre reporting to the SOC Manager.

Required Skills:

Logging, Event Management, Steps Validation, Metrics, Infrastructure Strategy, Security Communication Management