Security Operations Center Analyst

GCS; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

GCS in Abu Dhabi is seeking SOC Analysts across L1, L2 and L3 to join a cybersecurity team. You will monitor security threats, investigate incidents and improve threat detection capabilities across diverse enterprise environments.

This is an opportunity to work with modern security technologies in a fast-paced, high-volume SOC, with exposure to AI security possibilities. You will monitor security events, detect threats, develop SIEM detection rules, respond to incidents, and conduct threat

Qualifications

• Hands-on experience in a SOC or cybersecurity operations environment.
• Experience with SIEM technologies.
• Familiarity with EDR/XDR solutions such as Microsoft Defender, CrowdStrike or similar.
• Understanding of security monitoring, threat detection, incident response and security investigations.
• Knowledge of networking, Windows/Linux security and log analysis.
• Ability to manage multiple investigations, prioritise alerts and work within defined response times.
• Familiarity with MITRE ATT&CK, KQL, detection rules and threat intelligence advantageous.

Responsibilities

• Security monitoring: Monitor and analyse security events using SIEM and EDR/XDR platforms.
• Threat detection: Identify suspicious activity, analyse logs and investigate IOCs.
• Detection engineering: Develop, tune and optimise SIEM detection rules and use cases.
• Incident response: Investigate, elevate and respond to security incidents.
• Threat hunting: Use threat intelligence and MITRE ATT&CK to identify threats.
• Operational excellence: Manage alerts, maintain documentation and drive improvements.

Skills

Hands-on SOC experience

Security monitoring

Threat detection

Incident response

Threat hunting

Detection engineering

Log analysis

MITRE ATT&CK familiarity

Tools

SIEM technologies

EDR/XDR (Defender, CrowdStrike)

Microsoft Defender

Azure Sentinel / Defender XDR

Job description

Contract: 6 Months (Extendable)

Eligibility: Must currently be based in the UAE

Why this role

We're looking for SOC Analysts across L1, L2 and L3 to join a cybersecurity team in Abu Dhabi.

You'll play a key role in monitoring security threats, investigating incidents and improving threat detection capabilities across diverse enterprise environments.

This is an opportunity to work with modern security technologies in a fast-paced, high-volume security operations environment, contribute to detection engineering and potentially gain exposure to AI security and AI-driven security operations.

What you'll do

• Security monitoring: Monitor and analyse security events using SIEM and EDR/XDR platforms across multiple environments.
• Threat detection: Identify suspicious activity, analyse security logs and investigate indicators of compromise (IOCs).
• Detection engineering: Develop, tune and optimise SIEM detection rules, correlation logic and security use cases, according to experience level.
• Incident response: Investigate, elevate and respond to security incidents, supporting containment and remediation.
• Threat hunting: Use threat intelligence, behavioural analysis and MITRE ATT&CK to identify potential threats.
• Operational excellence: Manage security alerts and investigations within defined SLAs, maintain accurate documentation and support continuous improvement.

What you'll bring

• Hands-on experience in a SOC or cybersecurity operations environment.
• Experience with SIEM technologies
• Familiarity with EDR/XDR solutions such as Microsoft Defender, CrowdStrike or similar.
• Understanding of security monitoring, threat detection, incident response and security investigations.
• Knowledge of networking, Windows/Linux security and log analysis.
• Ability to manage multiple investigations, prioritise alerts and work within defined response times.
• Familiarity with MITRE ATT&CK, KQL, detection rules and threat intelligence would be advantageous.

Experience by level

L1 – Security Monitoring & Triage

• Monitor alerts, investigate security events and elevate incidents.
• Perform initial threat analysis and follow established response procedures.
• Conduct detailed investigations, proactive threat hunting and incident analysis.
• Tune SIEM rules, improve detection logic and reduce false positives.
• Support incident response and root cause analysis.

L3 – Advanced Detection & Security Operations

• Lead complex investigations, advanced threat hunting and incident response.
• Develop detection use cases, correlation rules and detection engineering capabilities.
• Improve detection coverage, support automation and mentor junior analysts.

Nice to have

• Experience supporting multiple enterprise environments or customer security operations.
• Experience working in high-volume SOC environments with defined SLAs and escalation procedures.
• Microsoft Sentinel, Defender XDR and Azure security expertise.
• Advanced KQL, SOAR, Python/PowerShell scripting and security automation.
• Exposure to AI security, AI-assisted threat detection or security monitoring for AI environments.
• Certifications such as Security+, SC-200, CySA+, CEH or GIAC.

Work across security monitoring, threat detection, incident response and detection engineering in a dynamic environment supporting diverse security infrastructures.

Whether you're an L1 analyst building your foundations or an L3 specialist driving advanced detection capabilities, we'd love to hear from you.

Applicants must already be based in the UAE.