Senior Cyber Security Consultant

iConnect IT Business Solutions DMCC; Dubai; On-site; AED 350,000 - 550,000; Full time

Job summary

iConnect IT Business Solutions DMCC is seeking a seasoned cybersecurity leader to own the technical side of our security practice in the UAE. You will shape opportunities, prove solutions in client environments, and direct the SOC platform underpinning our managed services.

You will lead and develop the security engineering team, set technical standards, and drive successful POCs, RFP/RFI responses, and compliance mapping across UAE regulators.

Qualifications

• 6+ years in cyber security, with at least 3 in the UAE or GCC market.
• Hands-on SIEM/SOC engineering experience (Microsoft Sentinel, Splunk, QRadar or equivalent) and SOAR playbook experience.
• Demonstrated experience running POCs and technical evaluations through to a client decision.
• Experience writing RFP/RFI responses and solution designs for regulated or government clients.
• Working knowledge of UAE regulatory frameworks.
• Hands-on depth in at least three of: EDR/XDR, PAM, email security/DMARC, DLP and data classification, vulnerability management, offensive validation.
• Bachelor's degree in a relevant field.
• A current certification such as OSCP, CEH, or CompTIA CySA+/Pentest+ (or equivalent).

Responsibilities

• Lead technical discovery with security, infrastructure and compliance stakeholders, and translate findings into solution architectures and bills of materials.
• Own technical responses to RFPs and RFIs for enterprise and public-sector tenders, including compliance mapping.
• Run competitive evaluations across vendors, positioning on architecture and operating model rather than feature lists.
• Plan and run POCs in live client environments, with success criteria agreed in writing up front.
• Lead technical delivery across endpoint (EDR/XDR), privileged access, data classification and DLP, email security and authentication, vulnerability management and offensive validation.
• Hand engagements to operations with documented design decisions.
• Own the SOC platform: collection, processing and storage architecture, retention, custom parsers, correlation rules and multi-tenant MSSP onboarding.
• Build and maintain SOAR playbooks (phishing triage, enrichment, containment).
• Tune detections to keep alert volume actionable.
• Map controls to UAE standards and produce audit evidence.
• Set technical standards and methodology for the security team, and mentor engineers. Deliver training and workshops.

Skills

SIEM/SOC Engineering

EDR/XDR

PAM (Privileged Access)

Email Security DMARC

DLP Data Classification

Vulnerability Management

Offensive Validation

SOAR Playbooks

Team Leadership

RFP/RFI Responses

Education

Bachelor's degree

Tools

Microsoft Sentinel

Splunk

QRadar

SOAR platforms

Job description

Job Description:

About the Role

iConnect IT Business Solutions is a UAE-based MSSP and professional-services partner serving enterprise, banking and government clients across the UAE and GCC.

This role owns the technical side of our security business end to end: shaping and winning opportunities, proving solutions in client environments, and operating the SOC platform our managed services run on. You will also lead and develop the security engineering team, setting the technical standards the rest of the team works to.

Responsibilities

Presales and solution architecture

• Lead technical discovery with security, infrastructure and compliance stakeholders, and translate findings into solution architectures and bills of materials.


• Own technical responses to RFPs and RFIs for enterprise and public-sector tenders, including compliance mapping.


• Run competitive evaluations across vendors, positioning on architecture and operating model rather than feature lists.

Proof of concept and delivery

• Plan and run POCs in live client environments, with success criteria agreed in writing up front.


• Lead technical delivery across endpoint (EDR/XDR), privileged access, data classification and DLP, email security and authentication, vulnerability management and offensive validation.


• Hand engagements to operations with documented design decisions.

SOC and automation

• Own the SOC platform: collection, processing and storage architecture, retention, custom parsers, correlation rules and multi-tenant MSSP onboarding.


• Build and maintain SOAR playbooks (phishing triage, enrichment, containment).


• Tune detections to keep alert volume actionable.

Compliance

• Map controls to NESA, CBUAE, DESC, ADGM, DIFC and UAE PDPL, plus PCI DSS and ISO 27001, and produce audit evidence.

Team and enablement

• Set technical standards and methodology for the security team, and mentor engineers.


• Deliver training and workshops for client and partner teams.

Requirements

• 6+ years in cyber security, with at least 3 in the UAE or GCC market.


• Hands-on SIEM/SOC engineering experience (Microsoft Sentinel, Splunk, QRadar or equivalent) and SOAR playbook experience.


• Demonstrated experience running POCs and technical evaluations through to a client decision.


• Experience writing RFP/RFI responses and solution designs for regulated or government clients.


• Working knowledge of UAE regulatory frameworks.


• Hands-on depth in at least three of: EDR/XDR, PAM, email security/DMARC, DLP and data classification, vulnerability management, offensive validation.


• Team leadership or mentoring experience.


• Bachelor's degree in a relevant field.


• A current certification such as OSCP, CEH, or CompTIA CySA+/Pentest+ (or equivalent).

Qualifications

Preferred

• OSCP or a comparable offensive-security certification.


• Microsoft security stack (Entra ID, Intune, Purview, Sentinel, Defender).


• SOC/SIEM and SOAR platform vendor certifications.


• Penetration testing or secure-code-review background.

What success looks like in the first 12 months

• A smooth takeover of the SOC platform and active engagements within the first 90 days.


• POC-to-deployment conversion at or above team target.


• Strong RFP/RFI quality and win rate.


• Measurable detection-quality and false-positive improvement on managed tenants.


• Documented, repeatable handover from presales to delivery.