Senior SOC Analyst

CPX; Abu Dhabi; On-site; AED 201,000 - 212,000; Full time

Job summary

CPX in Abu Dhabi seeks a Senior Security Operations Centre Analyst to lead monitoring efforts, analyze log sources, respond to incidents, and enhance the security operations program across CPX/Client technology.

The ideal candidate has BS or MS in Information Security, Computer Science, or EE and 6–8 years of relevant experience with Windows/Linux/Unix, SIEM (Splunk), and threat detection tools. This is a fast-paced role requiring cross-functional collaboration.

Qualifications

• BS or MS in Information Security / Computer Science / Electrical Engineering or related field.
• 6–8 years of experience in security operations and incident response.
• Proficient with Windows/Linux/Unix and SIEM tools such as Splunk.

Responsibilities

• Validate the Incidents escalated by Tier 1 SOC Security Analysts.
• Perform second level of threat condition and determine which security issues may have an impact on the organization services and information’s.
• Conduct research, analysis, and correlation across wide variety data sets (e.g., indications and warnings).
• Provide recommendations for incident handling, and security monitoring and validation of physical security
• Identify weaknesses in software, hardware, and networks.
• Analyze, and communicate with stakeholders, the threats associated with every incident.
• Coordinate with relevant stakeholders to validate network alerts.
• Conduct analysis of log files, evidence, and other information in order to determine best methods for identifying attackers.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Monitor external data sources (e.g., Threat Intelligent sources, Dubai AE-CERT Teams, etc.) to maintain cur SIEM content development, tuning, reports and dashboards.

Skills

Security operations

Incident response

SIEM

Threat analysis

Log analysis

Windows/Linux

Education

BS or MS in Information Security / Computer Science / Electrical Engineering

Tools

Wireshark

ELK

Rekall

Ghidra

FlareVM

Splunk

EDR

Job description

Given the urgency of this position, the recruitment process has been accelerated. Interviews are progressing actively, with all candidate assessments expected to be completed over the next two - three weeks.

Senior SOC Analyst

Only candidates who meet the below criteria and are genuinely interested in the opportunity are encouraged to apply. Applications that do not align with the specified requirements may not be considered.

• Salary - AED 18000- 19000 per month
• Duration - 1 year (can be extendable)
• Required Notice Period -Immediate or max 1 month

Certifications (Technical & Non-Technical)

Related security certifications (i.e. CCNA, Network+, Security+, CISSP, CISM, GICSP, GCIH, GCIA, GRID)

• Min 6-8 yrs. experience one or more of the following:
• Skilled in identifying trends and patterns from analyzing host-based, network-based security logs
• Used network investigation tools such as Wireshark, and any other open-source tools such as ELK, Rekall, Ghidra, FlareVM, to analyze log sources/memory/malware to understand intrusion vectors and attacker tactics, techniques and procedures
• Provide support and guidance to improve security requirements for the security operations
• Experience with Windows/Linux/Unix, understanding of NIDS/HIDS
• Monitoring of SIEM alerts with tools such as Splunk and EDR solutions

Education

BS or MS in Information Security / Computer Science / Electrical Engineering or related field

The Security Operations Centre team at CPX is a cross-functional Operations/ Engineering team involved at all phases of our application and service release lifecycle that embraces the SecOps communication, collaboration, and integration method. The Senior Security Analyst is responsible for leading security monitoring efforts, analyzing various log sources, responding to security incidents, and enhancing the overall security operations program within elements of CPX/Client technology.

Key Responsibilities

• Validate the Incidents escalated by Tier 1 SOC Security Analysts.
• Perform second levrrency of threat condition and determine which security issues may have an impact on the organization services and information’s.
• Conduct research, analysis, and correlation across wide variety data sets (e.g., indications and warnings).
• Provide recommendations foel of incident handling, and security monitoring and validation of physical security
• Identify weaknesses in software, hardware, and networks.
• Analyze, and communicate with stakeholders, the threats associated with every incident.
• Coordinate with relevant stakeholders to validate network alerts.
• Conduct analysis of log files, evidence, and other information in order to determine best methods for identifying attackers.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Monitor external data sources (e.g., Threat Intelligent sources, Dubai AE-CERT Teams, etc.) to maintain cur SIEM content development, tuning, reports and dashboards.