Lead Analyst SOC Monitoring

CPX; Abu Dhabi; On-site; AED 420,000 - 650,000; Full time

Job summary

CPX is seeking a Lead Analyst / Tier-3 Analyst to oversee the SilkRunner Agentic AI SOC framework within a large-scale ICT security environment in Abu Dhabi.

You will lead SOC operations, incident response, threat hunting, and vulnerability management, ensuring governance, SLAs, and risk-based decisions. The role emphasizes expert oversight of AI-driven processes with human validation and mentoring, collaborating with CTI and security teams.

Qualifications

• 10+ years of information/cyber security experience in large-scale ICT environments.
• High-level understanding of TCP/IP and the OSI model.
• Knowledge of Windows and/or Unix-based systems/architectures and security.
• Strong knowledge of LAN/WAN technologies.

Responsibilities

• Lead and manage daily SOC activities and ensure efficient monitoring of security systems.
• Oversee the triage, investigation, and resolution of security incidents.
• Ensure incident handling aligns with defined SLAs and escalation procedures.
• Coordinate and lead incident response efforts.
• Analyze and respond to complex threats using threat intelligence and advanced detection techniques.
• Oversee triage, investigation, and remediation of security events and incidents.
• Lead major incident investigations and coordinate with other teams such as Incident Response, Threat Hunting, and CTI functions.

Skills

SOC leadership

Incident response

Threat hunting

SIEM management

Threat intelligence

Vulnerability management

Education

CISSP

CISM

GIAC Certifications

Tools

SIEM tools

EDR

Firewall

IDS/IPS

Job description

Specifications: -

• Minimum of 10+ years’ relevant experience or working in a large-scale ICT environment focused on Information/Cyber Security.
• High-level understanding of TCP/IP protocol and OSI Seven Layer Mode.
• Knowledge of security best practices and concepts.
• Knowledge of Windows and/or Unix-based systems/architectures and related security.
• Sound level of knowledge of LAN/WAN technologies.

Need someone who can work on operating model within the SilkRunner Agentic AI SOC framework, the requirement for a Lead Analyst / Tier-3 Analyst becomes even more critical, not less.

While SilkRunner automates L1 and L2 tasks such as triage, enrichment, investigation support, reporting, and alert prioritization, the framework explicitly retains human validation, governance oversight, exception handling, complex investigations, and continuous model optimization as

key operational components.

1. AI Requires Expert Oversight, Not Autonomous Decision-Making

2. Ownership of High-Severity and Complex Investigations

3. Continuous Optimization of SilkRunner Intelligence

5. Detection Engineering and Threat Hunting Leadership

6. Maximizing Return on AI Investment

Skills/Certifications

• ISC² Certified Information Systems Security Professional (CISSP)
• CISM Certified Information Security Manager
• GIAC Certifications

Key Responsibilities:

SOC Operations Management:

• Lead and manage daily SOC activities and ensure efficient monitoring of security systems.
• Oversee the triage, investigation, and resolution of security incidents.
• Ensure incident handling aligns with defined SLAs and escalation procedures.
• Coordinate and lead incident response efforts.
• Analyze and respond to complex threats using threat intelligence and advanced detection techniques.
• Oversee triage, investigation, and remediation of security events an incident.
• Lead major incident investigations and coordinate with other teams such as Incident Response, Threat Hunting, and CTI functions.

Security Tools & SIEM Management:

• Manage and optimize SIEM tools and other security technologies.
• Ensure effective integration of tools for comprehensive monitoring.
• Correlate security events from SIEM, EDR, Firewall, IDS/IPS etc.
• Validate and fine tune detection rules, correlation searches, and threat models.
• Identify automation opportunities to reduce mean time to detect (MTTD) and mean time to respond (MTTR).

Threat Hunting & Vulnerability Management:

• Proactively identify threats lurking in the environment by conducting threat hunting exercises.
• Oversee vulnerability scanning and patch management.
• Work closely with CTI and Threat Hunters to integrate IOCs, TTPs, and MITRE ATT&CK coverage to enhance detection posture overall.

Reporting & Compliance:

• Generate detailed reports on incidents, trends, and SOC performance.
• Ensure compliance with industry standards and regulatory requirements.
• Provide regular operational metrices and incident reports to senior management.
• Work closely with IT, Cloud, Application, Risk, and Security teams for cross-functional incident handling.
• Contribute to the development of security policies and procedures.
• Mentor and guide SOC analysts.
• Conduct training sessions and promote continuous learning.