Senior SOC Incident Response & Threat Hunter

Cyber Gate Defense; United Arab Emirates; On-site; AED 240,000 - 420,000; Full time

Job summary

Cyber Gate Defense seeks an experienced cybersecurity professional to lead investigations and containment of advanced incidents. You will analyze alerts, triage threats, and coordinate responses across IT, network, cloud, and endpoint security teams.

A strong focus on QRadar and Splunk, with proficiency in AQL and SPL, is required. Responsibilities include developing incident reports, executive summaries, and post-incident reviews, while applying MITRE ATT&CK mappings and threat intelligence to

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity or related field.
• Hands-on experience in cybersecurity or SOC operations with incident response focus.
• Proficiency with IBM QRadar and Splunk SIEM.
• Strong knowledge of QRadar AQL and Splunk SPL.
• Knowledge of Windows, Linux, Active Directory, DNS, HTTP/S, TCP/IP, VPNs, firewalls, proxies, and endpoint security.
• Experience investigating phishing, malware, ransomware, privilege escalation, lateral movement, and data exfiltration.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and incident response methodologies.
• Experience with EDR/XDR platforms, threat intelligence, and vulnerability management.

Responsibilities

• Lead the investigation and resolution of complex security incidents escalated by L1 and L2 SOC teams.
• Perform detailed analysis of security alerts, events, and logs to identify advanced threats and malicious activities.
• Conduct incident triage, root cause analysis, impact assessment, containment, eradication, and recovery.
• Investigate advanced persistent threats (APTs), ransomware, malware infections, insider threats, and account compromises.
• Coordinate incident response activities with IT infrastructure, network, cloud, endpoint, and application security teams.
• Develop detailed incident reports, executive summaries, and post-incident reviews.

Skills

QRadar SIEM

Splunk SIEM

AQL

SPL

Threat hunting

Incident response

MITRE ATT&CK

EDR/XDR platforms

Network security

Windows/Linux security

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

IBM QRadar

Splunk

Job description

Cyber Gate Defense seeks an experienced cybersecurity professional to lead investigations and containment of advanced incidents. You will analyze alerts, triage threats, and coordinate responses across IT, network, cloud, and endpoint security teams.

A strong focus on QRadar and Splunk, with proficiency in AQL and SPL, is required. Responsibilities include developing incident reports, executive summaries, and post-incident reviews, while applying MITRE ATT&CK mappings and threat intelligence to