Senior Information Security Analyst

K20s Kinetic Technologies; Dubai; On-site; AED 240,000 - 480,000; Full time

Job summary

K20s Kinetic Technologies is hiring a Senior Information Security Analyst to safeguard information assets by leading security operations, vulnerability management, incident response, and security assessments. The role supports risk management, governance and continuous cybersecurity improvements.

Applicants should have strong experience across API, web, cloud, and endpoint security, plus familiarity with SIEM, PAM and threat intelligence tools.

Qualifications

• Bachelor’s or higher in IT/CS with relevant experience.
• Experience in risk management, governance and security operations.
• Strong knowledge of SIEM, vulnerability management, and security controls.

Responsibilities

• Lead security operations, vulnerability management and incident response.
• Perform risk assessments, document remediation plans and runbooks.
• Coordinate incident response and forensic evidence collection.
• Develop security reports and improve SOC playbooks.

Skills

Cloud security

SIEM

PAM

Email security

Vulnerability management

Threat intelligence

Endpoint security

SOC playbooks

ISO 27001

NIST

CIS Controls

Troubleshooting

Interpersonal skills

Education

Bachelor's degree in information technology or Computer Science

Master's degree in information technology or Computer Science

Tools

Tenable

Qualys

CyberArk

Splunk

LogRhythm

Fortinet

Symantec

PAM

IronPort

Job description

The Senior Information Security Analyst is responsible for protecting the organization s information assets by leading security operations vulnerability management incident response security assessments and implementation of technical security controls The role also supports risk management activities security governance and continuous improvement of the organization s cybersecurity posture

Risk Management amp GovernanceUnderstand

• applicable regulations standards and best practices
• Perform cybersecurity risk assessments and identify emerging risks
• Develop remediation and corrective action plans
• Maintain risk management documentation and implementation guides
• Review and update cybersecurity documentation

Security Operations

• Monitor SIEM alerts and security events
• Investigate incidents and eliminate false positives
• Support Vulnerability Assessment and Penetration Testing
• VAPT Validate remediation activities
• Research emerging cyber threats and implement safeguards

Incident Response

• Maintain and improve the Cybersecurity Incident Response Plan
• Support incident investigations and forensic evidence collection
• Coordinate cyber incident response activities
• Analyze packet captures and security logs
• Document incidents lessons learned and response procedures
• Maintain escalation matrices and incident runbooks

Technical Security

• Assess API Web Mobile and Cloud security
• Review Web Application Firewall effectiveness
• Provide technical guidance to Information Security teams
• Produce technical security reports and knowledge base documentation

Desired Knowledge

Master s degree in information technology or Computer Science or relevant fieldGood knowledge of overall infrastructure technical knowledge amp troubleshooting methodologiesGood knowledge and practice for cloud security Good knowledge and hands-on experience on SIEM PAM Email Security devices VA solutions threat intelligence solutions Endpoint security solutions like Tenable Qualys CyberArk Splunk LogRhythm IronPort Fortinet Symantec Sound knowledge in SOC playbooks A strong understanding and knowledge of computer network and security systems Good knowledge ISO standards like ISO 27001 NIST CIS benchmarksStrong Security productsTrouble shooting skills Strong interpersonal and communication skills

Qualifications - Required

Bachelor's degree in information technology, Computer Science, or a related field.Minimum 5 years of relevant Information Security experience.

Qualifications - Preferred

Master's degree in information technology, Computer Science, or related field.Knowledge of infrastructure troubleshooting methodologies.Knowledge of cloud security best practices.Hands-on experience with SIEM, PAM, Email Security, Vulnerability Management, Threat Intelligence, and Endpoint Security solutions.Strong understanding of SOC playbooks.Knowledge of ISO 27001, NIST, and CIS Controls.Excellent troubleshooting, communication, and interpersonal skills.

Preferred Certifications

CEHOSCPCISSPCHFIECIHISO 27001ISFCECCE