Senior IT Security Operations Engineer

VaporVM; Dubai; On-site; AED 250,000 - 390,000; Full time

Job summary

VaporVM seeks a Senior IT Security Operations Engineer to monitor, detect, investigate, and respond to cybersecurity threats while ensuring the security and availability of the organization's IT infrastructure.

You will manage SIEM, EDR/XDR, IDS/IPS, and vulnerability management, perform threat hunting, and support incident response with focus on continuous improvement and compliance.

Qualifications

• Education: Bachelor's degree in Computer Science, Information Security, or related field.
• Security certifications such as Security+, CEH, GIAC, or OSCP are preferred.

Responsibilities

• Monitor and manage SIEM, EDR, IDS/IPS, DLP, and security monitoring tools.
• Investigate security incidents, perform threat hunting, and support incident response activities.
• Conduct vulnerability assessments and coordinate remediation with IT teams.
• Manage and optimize security tools, detection rules, and automation playbooks.
• Prepare incident reports, security metrics, and support compliance audits.

Skills

SIEM

EDR/XDR

Incident response

Threat hunting

Threat intelligence

Log analysis

24x7 operations

Education

Bachelor's degree in Computer Science / Information Security

Tools

Splunk

QRadar

Azure Sentinel

Firewall systems

Job description

Senior IT Security Operations Engineer The Senior IT Security Operations Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats while ensuring the security and availability of the organization's IT infrastructure.

Key Responsibilities

• Monitor and manage SIEM, EDR, IDS/IPS, DLP, and security monitoring tools.
• Investigate security incidents, perform threat hunting, and support incident response activities.
• Conduct vulnerability assessments and coordinate remediation with IT teams.
• Manage and optimize security tools, detection rules, and automation playbooks.
• Prepare incident reports, security metrics, and support compliance audits.

Requirements

• Education & Certifications Bachelor's degree in Computer Science, Information Security, or a related field.
• Security certifications such as Security+, CEH, Splunk, GIAC, or OSCP are preferred.

Experience

• Experience5-8 years of experience in SOC or IT Security Operations.
• Hands-on experience with SIEM (Splunk, QRadar, Sentinel), firewalls, EDR/XDR, and endpoint security.
• Experience with incident response, vulnerability management, and log analysis.

Technical Skills

• Knowledge of Windows, Linux, and cloud platforms (AWS, Azure, or GCP).
• Understanding of malware, phishing, ransomware, threat intelligence, and MITRE ATT&CK.
• Python, Power Shell, or Bash scripting is an advantage.

Soft Skills

• Strong analytical, troubleshooting, and communication skills.
• Ability to work in a 24x7 SOC environment.