L1 SOC Analyst | Abu Dhabi, UAE

Tech Junction Ltd; Abu Dhabi; Sur place; AED 240 000 - 360 000; Plein temps

Résumé du poste

Tech Junction Ltd in Abu Dhabi, UAE is seeking an experienced L1 SOC Analyst to join our cybersecurity team on a full-time, on-site rotational shift. You will triage alerts, monitor SIEM, investigate network anomalies, and escalate threats in a fast-paced environment.

Requirements include a Bachelor's degree in Cybersecurity, CS, or IT and 1–3 years in SOC/security monitoring, hands-on SIEM work, knowledge of MITRE ATT&CK, and strong English communication for incident reporting.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field.
• 1–3+ years of progressive professional experience in a SOC or security monitoring.
• Hands-on operational expertise with enterprise SIEM tooling (Google SecOps/Chronicle, Splunk, Sentinel, QRadar, ArcSight).
• Familiarity with SOAR platforms (Palo Alto XSOAR, Splunk SOAR, IBM Resilient) and security automation.
• Solid understanding of core networking protocols (TCP/IP, DNS, HTTP/S) and firewall log structures.
• Comprehensive knowledge of MITRE ATT&CK framework, threat intel feeds, and alert lifecycle.
• Excellent analytical, troubleshooting, and crisis management with strong reporting.

Responsabilités

• Monitor enterprise security posture, review real-time logs, and triage alerts across multi-vendor SIEM dashboards.
• Execute hands-on log analysis using SIEM tools (Google SecOps/Chronicle, Splunk, Sentinel, QRadar, ArcSight).
• Leverage SOAR platforms (XSOAR, Splunk SOAR, IBM Resilient) to automate incident response workflows.
• Apply MITRE ATT&CK knowledge to identify tactics, techniques, and procedures during triage.
• Investigate network traffic anomalies, inspect TCP/IP captures, DNS queries, HTTP/S traffic, firewall logs.
• Escalate verified incidents to Tier 2/3 with thorough documentation and artifacts.
• Participate in rotational shift coverage to ensure 24/7 threat monitoring.
• Create incident tickets, handover reports, threat notes, and SOPs.

Connaissances

SIEM tooling

SOAR platforms

MITRE ATT&CK

Networking fundamentals

Incident reporting

English communication

On-site rotation

Formation

Bachelor's degree in Cybersecurity/CS/IT

Outils

Google SecOps/Chronicle

Splunk

Microsoft Sentinel

IBM QRadar

ArcSight

Palo Alto XSOAR

Splunk SOAR

IBM Resilient

Description du poste

Position Summary

We are actively seeking an experienced, high-caliber, and technical L1 SOC Analyst with 1 to 3 years of professional experience in security operations and threat monitoring to join our cybersecurity team in Abu Dhabi, UAE on a full-time permanent on-site rotational shift basis. In this critical security operations role, you will be responsible for triaging security alerts, investigating network anomalies, monitoring SIEM platforms, and escalating cyber threats. You will leverage your deep specialist expertise in security information and event management (SIEM), security orchestration, automation, and response (SOAR), and the MITRE ATT&CK framework to deliver uncompromised digital defense and incident response readiness. This opportunity offers competitive compensation, executive technical visibility, and exceptional career growth prospects within a premier global cybersecurity and enterprise technology organization.

Detailed Job Description

As an L1 SOC Analyst supporting enterprise security operations in Abu Dhabi, UAE, you will take full operational, tactical, and technical ownership of security alert triage, log inspection, incident escalation, and threat telemetry monitoring. Your day-to-day responsibilities include monitoring SIEM tools (Google SecOps/Chronicle, Splunk, Microsoft Sentinel, IBM QRadar, or ArcSight), managing SOAR platforms (Palo Alto XSOAR, Splunk SOAR, IBM Resilient), analyzing firewall and TCP/IP network logs, mapping threats to the MITRE ATT&CK framework, and collaborating with senior incident responders during rotational shift coverage. You will utilize your proactive troubleshooting and analytical skills to rapidly identify and neutralize cyber threats under strict service level agreements.

Key Responsibilities

• Monitor enterprise security posture, review real-time security logs, and perform primary alert triage across multi-vendor SIEM dashboards.
• Execute hands-on log analysis utilizing SIEM platforms including Google SecOps/Chronicle, Splunk, Microsoft Sentinel, IBM QRadar, and ArcSight.
• Leverage SOAR platforms such as Palo Alto XSOAR, Splunk SOAR, and IBM Resilient to automate incident response workflows.
• Apply knowledge of the MITRE ATT&CK framework to identify adversarial tactics, techniques, and procedures during alert triage.
• Investigate network traffic anomalies, inspect TCP/IP packet captures, DNS queries, HTTP/S traffic, and firewall audit logs.
• Escalate verified security incidents to Tier 2/Tier 3 incident responders with comprehensive technical documentation and artifact capture.
• Participate in rotational shift operations to ensure 24/7 continuous threat monitoring and uncompromised enterprise protection.
• Author meticulous incident tickets, shift handover reports, threat investigation notes, and standard operating procedures.

Required Qualifications & Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology (IT), or a related technical discipline.
• Minimum of 1 to 3+ years of progressive professional experience in a Security Operations Center (SOC) or IT security monitoring environment.
• Strong, demonstrable hands-on operational expertise with enterprise SIEM tooling (Google SecOps, Splunk, Sentinel, QRadar, ArcSight).
• Practical familiarity with SOAR platforms (Palo Alto XSOAR, Splunk SOAR, IBM Resilient) and security automation.
• Solid understanding of core networking protocols (TCP/IP, DNS, HTTP/S) and perimeter firewall log structures.
• Comprehensive knowledge of the MITRE ATT&CK framework, threat intelligence feeds, and security alert lifecycle management.
• Exceptional analytical, troubleshooting, problem-solving, and crisis management capabilities under high-pressure security environments.
• Excellent written and verbal English communication skills with strong incident reporting abilities.
• Mandatory legal work eligibility in the United Arab Emirates and availability for full-time on-site rotational shift operations in Abu Dhabi.

Nice-to-Have Skills

• Professional cybersecurity certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC Continuous Monitoring (GMON).
• Foundational cloud security credentials (e.g., Microsoft Certified: Azure Security Engineer Associate, AWS Certified Security).
• Exposure to AI-assisted SOC workflows, machine learning log parsers, and automated threat hunting toolsets.
• Prior professional working experience in top-tier managed security service providers (MSSPs) or financial services SOC teams.

Application Information

• Company Website: https://www.reachgroup.ae
• Salary/Rate: Market Competitive / Abu Dhabi Enterprise Package
• Deadline: Open until filled (Urgent Abu Dhabi On-Site SOC Opening)
• Notice Period: Immediate to 30 Days
• Contract Duration: Permanent / Full-Time On-Site Rotational Shifts (Abu Dhabi, UAE)