Senior Information security Analyst

K20s - Kinetic Technologies Private Limited; Dubai; On-site; AED 360,000 - 560,000; Full time

Job summary

K20s - Kinetic Technologies Private Limited in the United Arab Emirates is seeking a Senior Information Security Analyst to protect information assets, lead security operations, manage vulnerabilities, and drive incident response. You will develop remediation plans, support risk management, and strengthen governance while implementing technical security controls across on‑premises and cloud environments.

The role requires strong knowledge of SIEM, threat intelligence, endpoint security, and SOC

Qualifications

• Bachelor's degree in information technology, computer science, or a related field.
• Minimum 5 years of relevant information security experience.
• Strong knowledge of SIEM, vulnerability management, and incident response.
• Experience with cloud security and security governance concepts.
• Familiarity with ISO 27001, NIST and CIS controls is a plus.

Responsibilities

• Lead security operations, vulnerability management, and incident response processes.
• Develop remediation plans and maintain risk management documentation.
• Review and update cybersecurity policies, playbooks, and runbooks.
• Provide technical security guidance and produce security reports.
• Coordinate cyber incident response activities and forensic investigations.

Skills

SIEM

PAM

Email Security

Vulnerability Management

Threat Intelligence

Endpoint Security

Incident Response

Education

Bachelor's degree in IT/CS or related field

Master's degree in IT/CS or related field

Tools

Tenable

Qualys

CyberArk

Splunk

LogRhythm

Fortinet

OSINT/Threat Intelligence

Job description

Job Purpose

The Senior Information Security Analyst is responsible for protecting the organization's information assets by leading security operations, vulnerability management, incident response, security assessments, and implementation of technical security controls. The role also supports risk management activities, security governance, and continuous improvement of the organization's cybersecurity posture.

• Understand applicable regulations, standards, and best practices.
• Perform cybersecurity risk assessments and identify emerging risks.
• Develop remediation and corrective action plans.
• Maintain risk management documentation and implementation guides.
• Review and update cybersecurity documentation.

Job Purpose

The Senior Information Security Analyst is responsible for protecting the organization's information assets by leading security operations, vulnerability management, incident response, security assessments, and implementation of technical security controls. The role also supports risk management activities, security governance, and continuous improvement of the organization's cybersecurity posture.

Risk Management & Governance

• Understand applicable regulations, standards, and best practices.
• Perform cybersecurity risk assessments and identify emerging risks.
• Develop remediation and corrective action plans.
• Maintain risk management documentation and implementation guides.
• Review and update cybersecurity documentation.

Security Operations

• Monitor SIEM alerts and security events.
• Investigate incidents and eliminate false positives.
• Support Vulnerability Assessment and Penetration Testing (VAPT).
• Validate remediation activities.
• Research emerging cyber threats and implement safeguards.

Incident Response

• Maintain and improve the Cybersecurity Incident Response Plan.
• Support incident investigations and forensic evidence collection.
• Coordinate cyber incident response activities.
• Analyze packet captures and security logs.
• Document incidents, lessons learned, and response procedures.
• Maintain escalation matrices and incident runbooks.

Technical Security

• Assess API, Web, Mobile, and Cloud security.
• Review Web Application Firewall effectiveness.
• Provide technical guidance to Information Security teams.
• Produce technical security reports and knowledge base documentation.

Desired Knowledge

• Master's degree in information technology, or Computer Science or relevant field
• Good knowledge of overall infrastructure technical knowledge & troubleshooting methodologies
• Good knowledge and practice for cloud security.
• Good knowledge and hands-on experience on SIEM, PAM, Email Security devices, VA solutions, threat intelligence solutions, Endpoint security solutions like (Tenable, Qualys, CyberArk, Splunk, LogRhythm, IronPort, Fortinet, Symantec)
• Sound knowledge in SOC playbooks.
• A strong understanding and knowledge of computer, network, and security systems.
• Good knowledge ISO standards like ISO 27001, NIST, CIS benchmarks
• Strong Security productsTrouble shooting skills.
• Strong interpersonal and communication skills.

Qualifications - Required

• Bachelor's degree in information technology, Computer Science, or a related field.
• Minimum 5 years of relevant Information Security experience.

Qualifications - Preferred

• Master's degree in information technology, Computer Science, or related field.
• Knowledge of infrastructure troubleshooting methodologies.
• Knowledge of cloud security best practices.
• Hands-on experience with SIEM, PAM, Email Security, Vulnerability Management, Threat Intelligence, and Endpoint Security solutions.
• Strong understanding of SOC playbooks.
• Knowledge of ISO 27001, NIST, and CIS Controls.
• Excellent troubleshooting, communication, and interpersonal skills.

Preferred Certifications

• CEH
• OSCP
• CISSP
• CHFI
• ECIH
• ISO 27001
• ISFCE CCE

Skills: iso,security,cloud security