Security Analyst – SOC Operations

XAD Technologies; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading technology firm in the UAE seeks a Security Analyst for SOC Operations. This role includes advanced monitoring of cybersecurity incidents in a 5G security operations center. Responsibilities include conducting threat analysis, providing technical guidance to junior analysts, and improving security response measures. Ideal candidates will possess strong knowledge of cybersecurity principles, 4G/5G technologies, and experience with security tools like Splunk and Microsoft Sentinel.

Qualifications

• Strong understanding of TCP/IP and diverse network architectures.
• Hands-on experience with security tools and forensic analysis.
• Ability to work under pressure in security incidents.

Responsibilities

• Conduct detailed analysis of security incidents.
• Perform root cause analysis and investigations.
• Monitor evolving threat landscapes and vulnerabilities.

Skills

Advanced analysis of security incidents

Root cause analysis

Threat containment

Collaboration with teams

Mentoring SOC analysts

Monitoring threat landscapes

Education

Bachelor's degree in Computer Science or Information Security

Tools

SIEM

SOAR

Splunk

Microsoft Sentinel

Job description

The Role

The Security Analyst SOC Operations (Level 2) is responsible for advanced monitoring investigation and response to cybersecurity incidents within a Private 5G Security Operations Center. This role performs in-depth analysis of incidents escalated from Level 1 leads root cause investigations and supports the continuous security and resilience of 4G/5G RAN and Core networks. The position plays a critical role in strengthening detection capabilities improving response processes and ensuring uninterrupted and secure network operations.

Duties and Responsibilities

• Conduct detailed analysis of security incidents escalated by L1 SOC analysts.
• Perform root cause analysis and advanced investigations to determine scope impact and threat vectors.
• Respond to contain and remediate security incidents while minimizing operational and service impact.
• Utilize advanced security tools and techniques to analyze investigate and mitigate threats.
• Collaborate with internal and external teams to implement corrective and preventive security controls.
• Document incident findings actions taken and lessons learned in accordance with SOC procedures.
• Provide recommendations for improving incident response playbooks and 5G-specific security procedures.
• Maintain strong working knowledge of 4G/5G protocols signaling flows and architectures for RAN and Core.
• Provide technical guidance mentoring and on-the-job training to L1 SOC analysts.
• Monitor evolving threat landscapes vulnerabilities and technologies impacting 5G environments.
• Support and maintain the 5G SOC operations lab.
• Ensure the ongoing integrity availability and security of 5G RAN and Core network environments.

Requirements

• Bachelors degree in Computer Science Information Security or a related discipline.
• Strong understanding of TCP/IP OSI Seven Layer Model and diverse network architectures.
• Strong knowledge of cybersecurity principles and 4G/5G technologies.
• Hands‑on experience with security tools including SIEM SOAR IDS/IPS and forensic analysis tools.
• Proven ability to conduct advanced investigations including malware analysis and threat containment.
• Experience working in 4G/5G Security Operations environments.
• Experience in ISP or telecom environments is a strong advantage.
• Hands‑on experience with Splunk and Microsoft Sentinel.
• Experience across IT and OT environments.
• Strong analytical problem‑solving documentation and communication skills.
• Ability to work under pressure and respond effectively to security incidents.
• Industry certifications are preferred including CompTIA Security CSA CCNA CyberOps CySA GCIH BTL1 MITRE ATT&CK Defender (MAD) and Splunk / Microsoft Sentinel certifications.