SOC Analyst

International Free Zone Authority; Dubai; On-site; AED 223,200 - 334,800; Full time

Benefits offered by this job

24 annual leave days

Medical insurance plan

Participation in company functions

Learning and development opportunities

Job summary

The International Free Zone Authority in Dubai is seeking a SOC Analyst responsible for protecting information systems by identifying, assessing, and mitigating security risks. The role involves monitoring security incidents, implementing measures, and ensuring compliance with standards.

The ideal candidate will have a Bachelor's degree, at least 3 years of experience, and expertise in Microsoft Sentinel. Benefits include 24 annual leave days and medical insurance.

Qualifications

• Minimum 3+ years hands-on experience in SOC, blue team, or security engineering roles.
• Proven expertise with Microsoft Sentinel and incident management.
• Familiarity with MITRE ATT&CK mapping and threat-hunting methodology.

Responsibilities

• Monitor SIEM dashboards and security alerts in real time.
• Analyze phishing emails, malware infections, and unauthorized access.
• Create detailed incident tickets and conduct root cause analysis.

Skills

SIEM monitoring

Threat analysis

Incident management

Microsoft Defender

Education

Bachelor’s in engineering, Computer Science, or related field

Tools

Microsoft Sentinel

Incident management tools

Job description

Dubai, United Arab Emirates | Posted on 13/05/2026

IFZA Dubai is the most dynamic and truly international Free Zone Community in the UAE, optimizing the country's strategic location and world-class infrastructure. We provide easy, reliable, and fast company formation services through our network of Professional Partners and Government Authorities.

Job Description

The SOC The soc analyst will be responsible for protecting IFZA’s information systems identifying, assessing and mitigating security risks. This role involves monitoring, analyzing, and responding to security incidents, implementing security measures, and ensuring compliance with industry standards and regulations. The ideal candidate is proactive, detail-oriented, and possesses strong technical and analytical skills.

Requirements

Security Monitoring

• Monitor SIEM dashboards (e.g.,Microsoft Sentinel) and security alerts in real time.
• Track and analyze events from security tools (eg . Microsoft Defender)
• Identify suspicious activities, anomalies, or policy violations.
• Perform initial investigation and classification of alerts (false positive vs true positive).
• Collect and review logs, event details, reputation information, and indicators of compromise.
• Escalate confirmed or high-severity incidents to L2/L3 analysts with proper documentation.
• Initiate predefined response actions (isolating devices, forcing password resets, blocking IPs).

Threat Analysis

• Check IOC hits against threat intelligence sources.
• Analyze phishing emails, malware infections, malicious URLs, attachments, credential-harvesting attempts and unauthorized access.
• Identify trends across alerts to support early-stage threat detection.

Documentation & Reporting

• Create detailed incident tickets and investigation notes.
• Conduct root cause analysis and document incident reports with remediation recommendations.
• Maintain proper incident timelines and updates in the ticketing system.
• Generate reports for repeated or trending issues.
• Work closely with Security Team and internal IT teams.
• Communicate effectively with users to validate suspicious activities or login attempts.
• Follow established SOPs and contribute to process improvements.
• Conduct security awareness training for employees to promote best practices (e.g., password management, phishing prevention).
• Create and distribute educational materials on emerging cyber threats.
• Stay updated on the latest cyber threats, vulnerabilities, and attack vectors.

Required Qualifications

• Bachelor’s in engineering, Computer Science, or related field.
• Minimum 3+ years hands‑on experience in SOC, blue team, or security engineering roles.
• Proven expertise with Microsoft Sentinel, Microsoft Defender, incident management and compromised recovery.

Technical Skills

• Familiarity with MITRE ATT&CK mapping and threat‑hunting methodology.

Certifications (Good to Have)

• CompTIA Security+, MicrosoftSC-200, CEH, CCNA or CCNP - Security.

Benefits

• 24 annual leave days
• Medical insurance plan (with the option to upgrade at your own cost)
• Invitations to participate in various company functions, staff events, and department team building events
• Opportunities to learn, develop and grow with the organization