On-Site L1 SOC Analyst — 24/7 Threat Monitoring Abu Dhabi

Tech Junction Ltd; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

Tech Junction Ltd in Abu Dhabi, UAE is seeking an experienced L1 SOC Analyst to join our cybersecurity team on a full-time, on-site rotational shift. You will triage alerts, monitor SIEM, investigate network anomalies, and escalate threats in a fast-paced environment.

Requirements include a Bachelor's degree in Cybersecurity, CS, or IT and 1–3 years in SOC/security monitoring, hands-on SIEM work, knowledge of MITRE ATT&CK, and strong English communication for incident reporting.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field.
• 1–3+ years of progressive professional experience in a SOC or security monitoring.
• Hands-on operational expertise with enterprise SIEM tooling (Google SecOps/Chronicle, Splunk, Sentinel, QRadar, ArcSight).
• Familiarity with SOAR platforms (Palo Alto XSOAR, Splunk SOAR, IBM Resilient) and security automation.
• Solid understanding of core networking protocols (TCP/IP, DNS, HTTP/S) and firewall log structures.
• Comprehensive knowledge of MITRE ATT&CK framework, threat intel feeds, and alert lifecycle.
• Excellent analytical, troubleshooting, and crisis management with strong reporting.

Responsibilities

• Monitor enterprise security posture, review real-time logs, and triage alerts across multi-vendor SIEM dashboards.
• Execute hands-on log analysis using SIEM tools (Google SecOps/Chronicle, Splunk, Sentinel, QRadar, ArcSight).
• Leverage SOAR platforms (XSOAR, Splunk SOAR, IBM Resilient) to automate incident response workflows.
• Apply MITRE ATT&CK knowledge to identify tactics, techniques, and procedures during triage.
• Investigate network traffic anomalies, inspect TCP/IP captures, DNS queries, HTTP/S traffic, firewall logs.
• Escalate verified incidents to Tier 2/3 with thorough documentation and artifacts.
• Participate in rotational shift coverage to ensure 24/7 threat monitoring.
• Create incident tickets, handover reports, threat notes, and SOPs.

Skills

SIEM tooling

SOAR platforms

MITRE ATT&CK

Networking fundamentals

Incident reporting

English communication

On-site rotation

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Google SecOps/Chronicle

Splunk

Microsoft Sentinel

IBM QRadar

ArcSight

Palo Alto XSOAR

Splunk SOAR

IBM Resilient

Job description

Tech Junction Ltd in Abu Dhabi, UAE is seeking an experienced L1 SOC Analyst to join our cybersecurity team on a full-time, on-site rotational shift. You will triage alerts, monitor SIEM, investigate network anomalies, and escalate threats in a fast-paced environment.

Requirements include a Bachelor's degree in Cybersecurity, CS, or IT and 1–3 years in SOC/security monitoring, hands-on SIEM work, knowledge of MITRE ATT&CK, and strong English communication for incident reporting.