Senior SOC Security Analyst - Threat Detection and Response

DiceTek UAE; Abu Dhabi; Sur place; AED 120 000 - 150 000; Plein temps

Résumé du poste

Dicetek LLC is seeking an experienced Senior SOC Security Analyst for an immediate-start opportunity in Abu Dhabi, United Arab Emirates. The role focuses on monitoring, investigating and responding to cybersecurity threats across enterprise infrastructure, cloud platforms and application environments.

You will support SOC activities, investigate suspicious events, coordinate incident response and improve threat detection capabilities.

Qualifications

• Experience in 24x7 SOC operations and security monitoring.
• Hands-on SIEM investigations across enterprise, cloud and endpoint.
• Incident response coordination and documentation are required.
• Threat hunting and detection engineering experience.
• Familiarity with SOAR workflows and automation.

Responsabilités

• Monitor security alerts across SIEM, endpoint, network and cloud platforms.
• Investigate security events and coordinate incident response.
• Triage alerts by severity; maintain incident records and dashboards.
• Develop detection use cases and tune rules to reduce false positives.
• Support cloud security monitoring in Azure and AWS environments.

Connaissances

SOC operations

24x7 monitoring

Incident investigation

Threat hunting

Detection engineering

SOAR automation

Outils

Microsoft Sentinel

Splunk

IBM QRadar

EDR/XDR platforms

Description du poste

Senior SOC Security Analyst - Threat Detection and Response

Senior SOC Security Analyst - Threat Detection and Response Job Snapshot - Role: Senior SOC Security Analyst - Threat Detection and Response - Location: Abu Dhabi, United Arab Emirates - Industry: Banking - Function: Computer-Network Security - Experience: Minimum 7 years - Job Type: Full Time - Work Arrangement: On-site

Position Overview

Dicetek LLC is seeking an experienced Senior SOC Security Analyst for an immediate-start opportunity in Abu Dhabi, United Arab Emirates. The role focuses on monitoring, investigating and responding to cybersecurity threats across enterprise infrastructure, cloud platforms and application environments. The successful candidate will support Security Operations Centre (SOC) activities, investigate suspicious events, coordinate incident response and improve threat detection capabilities. The position requires practical experience with Security Information and Event Management (SIEM) platforms, endpoint and network security monitoring, threat hunting and Security Orchestration, Automation and Response (SOAR). The specialist will also support cloud security monitoring across Microsoft Azure, Amazon Web Services (AWS) and other enterprise environments while maintaining accurate incident records, operational dashboards and security reporting.

Job Details

• Country: United Arab Emirates
• City: Abu Dhabi
• Industry: Banking
• Function: Computer-Network Security
• Salary: Not disclosed
• Gender: No Preference
• Candidate Nationality: Not specified
• Job Type: Full Time
• Work Arrangement: On-site
• Required Start Date: Immediate

Key Responsibilities

Security Monitoring and Alert Triage

• Monitor security alerts across SIEM, endpoint, network and cloud security platforms.
• Analyse security events to identify suspicious activity and potential threats.
• Triage alerts according to their severity, relevance and potential impact.
• Investigate security events using available monitoring information and supporting evidence.
• Support security monitoring activities within a 24x7 SOC operating environment.
• Escalate confirmed or suspected incidents through established response procedures.
• Maintain accurate records of alert investigations and outcomes.

Cybersecurity Incident Investigation and Response

• Investigate suspicious activity affecting enterprise systems, applications and cloud environments.
• Coordinate incident response activities with relevant cybersecurity and technology teams.
• Analyse available security evidence to understand the nature and potential impact of incidents.
• Document investigation findings, root causes and remediation requirements.
• Track corrective actions arising from security incidents.
• Support timely resolution and appropriate escalation of security events.
• Maintain incident records suitable for operational review and reporting.

Threat Hunting and Detection Improvement

• Perform threat hunting to identify suspicious behaviour and potential security threats.
• Develop and refine security detection use cases.
• Tune detection rules to improve alert quality and reduce false positives.
• Identify gaps in existing security monitoring coverage.
• Use threat intelligence and security analytics to support investigations.
• Coordinate detection improvements with relevant SOC and engineering stakeholders.
• Monitor the effectiveness of implemented detection changes.

Cloud, Endpoint and Network Security

• Support security monitoring across Microsoft Azure and AWS environments.
• Investigate cloud-related security alerts and suspicious activity.
• Analyse endpoint security telemetry using relevant EDR or XDR capabilities.
• Review network security events as part of threat investigations.
• Correlate security information from multiple monitoring sources.
• Support visibility of threats affecting enterprise applications and infrastructure.

SOAR and Security Operations Automation

• Use SOAR capabilities to support security monitoring and incident response workflows.
• Identify opportunities to improve operational efficiency through automation.
• Support the development and refinement of automated security response activities.
• Review automation outcomes and investigate relevant operational issues.
• Coordinate automation improvements with security engineering teams.

SOC Reporting and Operational Readiness

• Maintain SOC dashboards and operational monitoring records.
• Prepare incident investigation reports and management updates.
• Document identified threats, investigation outcomes and corrective actions.
• Track outstanding remediation activities and operational issues.
• Provide clear security reporting for technical and executive stakeholders.
• Support continuous improvement of security monitoring and incident response readiness.
• Apply security operations practices aligned with relevant NIST and ISO 27001 requirements.

Required Experience

• Minimum 7 years of relevant professional experience.
• Experience in SOC operations, security monitoring, threat investigation or incident response.
• Practical knowledge of SIEM-based security investigations.
• Experience monitoring enterprise, endpoint, network and cloud security environments.
• Understanding of threat hunting and security detection engineering.
• Familiarity with SOAR automation and incident response workflows.
• Experience maintaining incident records and security operations reports.
• Knowledge of security operations practices aligned with NIST and ISO 27001.

Required Technical Skills

Security Operations

• 24x7 SOC operations.
• Security event monitoring and triage.
• Cybersecurity incident investigation.
• Incident response coordination.
• Root-cause analysis.
• Security incident documentation.
• Corrective action tracking.

SIEM and Detection Engineering

• Microsoft Sentinel, Splunk, IBM QRadar or an equivalent SIEM platform.
• Security event investigation.
• Threat detection use cases.
• Detection rule development and tuning.
• False-positive reduction.
• Security analytics and alert correlation.

Threat Hunting and Response

• Threat hunting.
• Suspicious activity investigation.
• Threat intelligence analysis.
• Incident escalation.
• Security detection improvement.
• SOAR automation.

Enterprise and Cloud Security

• Microsoft Azure security monitoring.
• AWS security monitoring.
• Endpoint security monitoring.
• Network security monitoring.
• Application security event analysis.
• EDR and XDR security telemetry.

Security Governance and Reporting

• NIST-aligned security operations.
• ISO 27001-aligned security practices.
• SOC dashboards.
• Incident reporting.
• Executive security updates.
• Remediation and corrective action tracking.

Preferred Tools and Platforms

• Microsoft Sentinel.
• Splunk.
• IBM QRadar.
• Endpoint Detection and Response (EDR) platforms.
• Extended Detection and Response (XDR) platforms.
• Security Orchestration, Automation and Response (SOAR) platforms.
• Threat intelligence platforms.

Preferred Professional Certifications

Relevant cybersecurity certifications are desirable, including:

• Microsoft Certified: Security Operations Analyst Associate (SC-200).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• Certified Ethical Hacker (CEH).
• CompTIA Security .
• CompTIA Cybersecurity Analyst (CySA ).
• Equivalent recognised cybersecurity certification.

Key Deliverables

• Timely security alert triage.
• Documented security investigations.
• Accurate incident records.
• Root-cause findings and remediation documentation.
• Improved security detection coverage.
• Refined detection use cases.
• Reduced false-positive alerts.
• Documented threat hunting and detection improvement activities.
• Maintained SOC operational dashboards.
• Incident and executive reporting.
• Tracked corrective actions.
• Clear visibility of outstanding security issues and remediation progress.

Professional Competencies

• Strong cybersecurity investigation and analytical skills.
• Ability to assess and prioritise security alerts.
• Effective incident response coordination.
• Practical understanding of enterprise and cloud security threats.
• Strong technical troubleshooting capabilities.
• Ability to document findings and remediation actions clearly.
• Effective communication with technical and management stakeholders.
• Attention to operational readiness and detection quality.
• Ability to work effectively within a continuous security operations environment.

Role Expectations

The Senior SOC Security Analyst will support enterprise cybersecurity operations through effective threat monitoring, investigation, incident response and detection improvement. The successful candidate will use SIEM, endpoint, network and cloud security capabilities to investigate suspicious activity and coordinate appropriate response actions. The role also requires a proactive approach to threat hunting, detection tuning, security automation and operational reporting. The primary objective is to strengthen security monitoring effectiveness, improve detection coverage, reduce false positives and maintain reliable incident response practices across enterprise technology environments. Candidates must have at least 7 years of relevant experience and be available for an immediate start.