Senior Information Security Engineer - XDR, SIEM & SOC Lead

Focus Infotech; Abu Dhabi; On-site; AED 180,000 - 280,000; Full time

Job summary

Focus Infotech in Abu Dhabi, UAE is seeking an Information Security Engineer with strong hands-on experience in Defender XDR/Endpoint policies, logging, SIEM coordination, and incident response. The role involves configuring Purview DLP controls, Zscaler policies, and Entra access reviews, while ensuring secure operations and governance across the SOC.

The candidate will coordinate with cloud, network, and identity owners, validate post-migration baselines, and drive remediation actions through

Qualifications

• Minimum 8 years of information security experience.
• Proven expertise in Defender XDR/Endpoint security and SIEM coordination.
• Experience with cloud security controls and identity management.

Responsibilities

• Establish and operate Defender XDR/Endpoint policies, connectors and security configurations.
• Validate logging, analytics, alert tuning and incident workflows, coordinating Sentinel/SIEM with the existing SOC.
• Configure Purview sensitivity labels, classification, information protection and DLP.
• Coordinate Zscaler secure-access/DLP policies with cloud and network owners.
• Validate post-migration security baselines and endpoint controls, identifying deviations for remediation.
• Coordinate Entra security controls and access reviews with identity owners, preserving authorized access and segregation of duties.
• Triage phishing, endpoint alerts and security events, collecting evidence and recording actions.
• Coordinate approved containment, escalation and SOC handover under existing contracts and playbooks.
• Maintain security-exception, risk and remediation trackers with accountable owners.

Job description

Focus Infotech in Abu Dhabi, UAE is seeking an Information Security Engineer with strong hands-on experience in Defender XDR/Endpoint policies, logging, SIEM coordination, and incident response. The role involves configuring Purview DLP controls, Zscaler policies, and Entra access reviews, while ensuring secure operations and governance across the SOC.

The candidate will coordinate with cloud, network, and identity owners, validate post-migration baselines, and drive remediation actions through