Security Intelligence & Analyst SOC L3

XAD Technologies; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity solutions provider in Abu Dhabi seeks a Senior Security Intelligence & Analytics professional to oversee threat detection and security posture in 4G/5G environments. Responsibilities include designing security use cases, analyzing traffic flows, and mentoring SOC analysts. The ideal candidate should have at least 5 years of experience in SOC operations, strong expertise in 4G/5G security, and relevant certifications. A collaborative environment focused on continuous improvement awaits the successful applicant.

Qualifications

• Minimum 5 years experience in a SOC environment.
• Strong expertise in 4G/5G security operations and telecom networks.
• Proven experience managing high-severity incidents across IT and OT environments.
• Certifications preferred: CISSP, GCIH, GCIA, Elastic Certified Analyst.

Responsibilities

• Design and deploy 5G security use cases across SOC platforms for RAN and Core networks.
• Analyze 5G protocols, traffic flows, and architectures to identify advanced threats.
• Lead root cause analysis and advanced investigations for high-severity incidents.

Skills

Advanced threat detection

Incident response

Analytical skills

Documentation

Stakeholder communication

Education

Bachelors or Masters degree in Cybersecurity, IT, or related field

Tools

Splunk

Microsoft Sentinel

SIEM

SOAR

IDS/IPS

Job description

The Role

The SOC L3 – Security Intelligence & Analytics role is a senior cybersecurity position within the 5G Intelligence and Analytics function. The role is accountable for advanced threat detection, investigation, and response across 4G/5G RAN and Core environments, including development of 5G-specific security use cases, playbooks, and continuous improvement of the SOC security posture.

Duties & Responsibilities

• Design and deploy 5G security use cases across SOC platforms for RAN and Core networks

• Analyze 5G protocols, traffic flows, and architectures to identify advanced threats

• Develop and maintain incident response playbooks and SOPs

• Lead root cause analysis and advanced investigations for high‑severity incidents

• Contain, remediate, and mitigate security incidents with minimal business impact

• Leverage SIEM, SOAR, IDS/IPS tools to analyze and neutralize threats

• Operationalize threat intelligence to strengthen proactive detection capabilities

• Collaborate with cross‑functional teams to implement preventive security controls

• Define and present KPIs, KRIs, and SOC performance metrics

• Mentor SOC analysts and contribute to capability uplift and knowledge sharing

Requirements

• Bachelors or Masters degree in Cybersecurity, IT, or related field

• Minimum 5 years experience in a SOC environment

• Strong expertise in 4G/5G security operations and telecom networks

• Hands‑on experience with Splunk, Microsoft Sentinel, SIEM, SOAR, IDS/IPS

• Proven experience managing high‑severity incidents across IT and OT environments

• Strong analytical, documentation, and stakeholder communication skills

• ISP/telecom experience is a strong advantage

• Certifications preferred: CISSP, GCIH, GCIA, Elastic Certified Analyst, BTL1, MITRE ATT&CK Defender, CCNA/CCNP CyberOps