Security Operations Center Analyst (SOC Analyst)

CPX; Abu Dhabi; On-site; AED 167,000 - 179,000; Full time

Job summary

CPX in Abu Dhabi is seeking a seasoned SOC Analyst to support rapid hiring. The role offers a monthly salary of AED 15,000–16,000 and a 1-year contract with possible extension. Immediate start and a max 1-month notice are expected.

You will bring 4–6 years in information/cyber security, a Bachelor's in engineering/CS, and certifications such as CompTIA Security+ and CEH. Strong TCP/IP, SIEM, IPS and log analysis skills are required.

Qualifications

• Bachelor’s degree in engineering, computer science, information systems, or quantitative field.
• CompTIA Security+ certification.
• EC-Council CEH certification.
• Strong understanding of TCP/IP and OSI model.
• Knowledge of security best practices and concepts.
• Experience with Windows and/or Unix-based systems.
• Knowledge of LAN/WAN technologies.
• Solid understanding of defense-in-depth analysis.
• Experience with SIEM, IPS, Antivirus, FIM, and DLP.
• Incident detection, reporting and response knowledge.

Responsibilities

• Examine network topologies to understand data flow.
• Use SOC tools to monitor and analyze system activity for malicious activity.
• Identify network mapping and OS fingerprinting activities.
• Continuously monitor SIEM events/alerts for anomalies.
• Perform event correlation to gain situational awareness of attacks.
• Detect incidents by monitoring SIEM console, rules, reports, dashboards.
• Provide timely detection and alerts of possible attacks/intrusions.
• Notify Senior SOC Analyst on suspected/anomaly events.
• Document and elevate incidents with history, status and impact.
• Monitor health of the SIEM tool and report issues.
• Assist Senior SOC Analysts and security specialists in investigations.
• Communicate with external teams for timely incident resolution.

Skills

TCP/IP knowledge

OSI model

Defense in depth

Log monitoring

Incident detection

SIEM usage

IPS familiarity

DLP knowledge

Education

Bachelor’s degree in engineering or related field

CompTIA Security+

CEH

Tools

SIEM

IPS

Antivirus

File Integrity Monitoring

DLP

Job description

Given the urgency of this position, the recruitment process has been accelerated. Interviews are progressing actively, with all candidate assessments expected to be completed over the next two weeks.

Title - SOC Analyst

• Salary - AED 15000 -16000 per month
• Duration - 1 year (can be extendable)
• Required Notice Period -Immediate or max 1 month

Minimum of 4 -6 years’ relevant experience or working in a large-scale ICT environment focusing on Information/Cyber Security.

Education & Certifications :-

• Bachelor’s degree in engineering, computer science, information systems, or any other quantitative field.
• CompTIA Security+
• EC-Council Certified Ethical Hacker (CEH)

Skill Set: -

• High-level understanding of TCP/IP protocol and OSI Seven Layer Model.
• Knowledge of security best practices and concepts.
• Knowledge of Windows and/or Unix-based systems/architectures and related security.
• Intermediate level of knowledge of LAN/WAN technologies.
• Must have a solid understanding of information technology and information security.
• Good understanding of defense-in-depth analysis techniques.
• Knowledge of log monitoring, analysis, and correlations.
• Knowledge of Incident detection, reporting, and responding.
• Understanding of security threats and vulnerabilities.
• Ability to use SIEM console to create/analyze Rules, Reports, and Dashboards.
• Sound knowledge of the functioning of IPS.
• Intermediate knowledge of using common security products like SIEM, IPS, Antivirus, File Integrity Monitoring, and DLP.

Key Responsibilities:

• Examine network topologies to understand data flow through the network.
• Use SOC tools to monitor and analyze system activity to identify malicious activity continually.
• Identify network mapping and operating system fingerprinting activities.
• Continuously monitor the SIEM events/alerts to identify any anomalies.
• Perform event correlation using information from various sources within the organization to gain situational awareness and determine the effectiveness of observed attacks.
• Detect Incidents by monitoring the SIEM console, Rules, Reports, and Dashboards.
• Provide timely detection, identification, and alerts of possible attacks/intrusions, anomalous activities, and misuse activities, distinguishing these incidents and events from benign ones.
• Report the confirmed incident as per the Incident management process.
• Notify the Senior SOC Analyst on suspected/anomaly events for further analysis.
• Document and elevate incidents (including the event’s history, status, and potential impact for further action) that may cause an ongoing and immediate impact on the environment.
• Monitor the health of the SIEM tool and report any issues/incidents/malfunctions to the SOC SIEM administrator.
• Assist Senior SOC Analysts and security specialists in incident investigation and workflow.
• Assist the Senior SOC Analyst and internal team in incident detection and resolution.
• Communicate and provide necessary information to external teams for timely incident resolution.