Senior SOC Incident Analyst: Detection & Response

Core42; Dubai; On-site; AED 200,000 - 320,000; Full time

Job summary

Core42 in Dubai is seeking an Incident Analyst to anchor the 24x7 Security Operations Center. You will own end-to-end incident response from alert through containment, eradication and recovery, while elevating detection quality and mentoring junior analysts.

The role requires hands-on expertise with Splunk, Cribl and EDR/NDR tools in a private-cloud OpenStack/OpenShift environment, and collaboration across platform, network and application teams.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• Hands-on experience with security incident handling and IR lifecycle.
• Strong experience with Splunk SPL, dashboards and correlation.

Responsibilities

• Monitor and triage security alerts in Splunk across private-cloud and enterprise services.
• Own incidents end-to-end from detection to recovery and post-incident review.
• Develop and maintain incident response playbooks and SOPs.

Skills

Incident analysis

Threat hunting

Security monitoring

SOP development

Cross-team collaboration

MITRE ATT&CK mapping

Education

Bachelor’s degree in Computer Science or related field

Tools

Splunk

Cribl

Elastic Security

Red Hat OpenShift

OpenStack

Job description

Core42 in Dubai is seeking an Incident Analyst to anchor the 24x7 Security Operations Center. You will own end-to-end incident response from alert through containment, eradication and recovery, while elevating detection quality and mentoring junior analysts.

The role requires hands-on expertise with Splunk, Cribl and EDR/NDR tools in a private-cloud OpenStack/OpenShift environment, and collaboration across platform, network and application teams.