Senior Information security Analyst

K20s Kinetic Technologies Private LImited - India; Dubai Emirate; On-site; AED 240,000 - 360,000; Full time

Job summary

K20s Kinetic Technologies Private Limited in Dubai seeks a Senior Information Security Analyst to protect information assets by leading security operations, risk management, and incident response. Responsibilities include monitoring SIEM alerts, investigating incidents, and implementing technical security controls.

Ideal candidate has 5+ years in information security, strong knowledge of ISO 27001/NIST/CIS, and hands-on experience with SIEM, PAM, and endpoint security.

Qualifications

• Bachelor’s degree in information technology, computer science or related field.
• Minimum 5 years of information security experience.
• Strong knowledge of ISO 27001, NIST, CIS controls.
• Hands-on experience with SIEM, PAM, email security and vulnerability management.

Responsibilities

• Lead security operations, risk assessments and incident response activities.
• Monitor and investigate security events, validate remediation actions.
• Support security governance and risk management documentation.
• Review API, web, mobile and cloud security and provide guidance.
• Produce technical security reports and maintain runbooks.

Skills

Interpersonal communication

Communication skills

Troubleshooting

Problem solving

Team collaboration

Education

Bachelor’s degree in IT/CS

Master’s degree in IT/CS

Tools

SIEM

PAM

Email security

Vulnerability assessment

Threat intelligence

Endpoint security

Tenable

Qualys

CyberArk

Splunk

LogRhythm

Fortinet

Symantec

Job description

Job Purpose

The Senior Information Security Analyst is responsible for protecting the organization's information assets by leading security operations, vulnerability management, incident response, security assessments, and implementation of technical security controls. The role also supports risk management activities, security governance, and continuous improvement of the organization's cybersecurity posture.

Risk Management & Governance

• Understand applicable regulations, standards, and best practices.
• Perform cybersecurity risk assessments and identify emerging risks.
• Develop remediation and corrective action plans.
• Maintain risk management documentation and implementation guides.
• Review and update cybersecurity documentation.

Security Operations

• Monitor SIEM alerts and security events.
• Investigate incidents and eliminate false positives.
• Support Vulnerability Assessment and Penetration Testing (VAPT).
• Validate remediation activities.
• Research emerging cyber threats and implement safeguards.

Incident Response

• Maintain and improve the Cybersecurity Incident Response Plan.
• Support incident investigations and forensic evidence collection.
• Coordinate cyber incident response activities.
• Analyze packet captures and security logs.
• Document incidents, lessons learned, and response procedures.
• Maintain escalation matrices and incident runbooks.

Technical Security

• Assess API, Web, Mobile, and Cloud security.
• Review Web Application Firewall effectiveness.
• Provide technical guidance to Information Security teams.
• Produce technical security reports and knowledge base documentation.

Desired Knowledge

• Master’s degree in information technology, or Computer Science or relevant field
• Good knowledge of overall infrastructure technical knowledge & troubleshooting methodologies
• Good knowledge and practice for cloud security.
• Good knowledge and hands-on experience on SIEM, PAM, Email Security devices, VA solutions, threat intelligence solutions, Endpoint security solutions like (Tenable, Qualys, CyberArk, Splunk, LogRhythm, IronPort, Fortinet, Symantec)
• Sound knowledge in SOC playbooks.
• A strong understanding and knowledge of computer, network, and security systems.
• Good knowledge ISO standards like ISO 27001, NIST, CIS benchmarks
• Strong Security productsTrouble shooting skills.
• Strong interpersonal and communication skills.

Qualifications - Required

• Bachelor’s degree in information technology, Computer Science, or a related field.
• Minimum 5 years of relevant Information Security experience.

Qualifications - Preferred

• Master’s degree in information technology, Computer Science, or related field.
• Knowledge of infrastructure troubleshooting methodologies.
• Knowledge of cloud security best practices.
• Hands-on experience with SIEM, PAM, Email Security, Vulnerability Management, Threat Intelligence, and Endpoint Security solutions.
• Strong understanding of SOC playbooks.
• Knowledge of ISO 27001, NIST, and CIS Controls.
• Excellent troubleshooting, communication, and interpersonal skills.

Preferred Certifications

• CEH
• OSCP
• CISSP
• CHFI
• ECIH
• ISO 27001
• ISFCE CCE

Skills: iso,security,cloud security