SOC Engineer

Client of AIQU; Abu Dhabi; On-site; AED 240,000 - 420,000; Full time

Job summary

Client of AIQU seeks a seasoned SOC Engineer to join our Security Operations Center in Abu Dhabi. You will monitor security alerts, investigate incidents, and develop detection rules to enhance protection of critical assets.

Ideal candidates have 6–8 years in SOC, strong SIEM/EDR experience, scripting skills (Python/PowerShell/Bash), and familiarity with MITRE ATT&CK. Arabic not required but beneficial for local operations.

Qualifications

• 6–8 years hands-on SOC experience.

Responsibilities

• Continuously monitor security alerts and logs from SIEM and EDR platforms.

Skills

Python scripting

PowerShell scripting

Bash scripting

MITRE ATT&CK knowledge

Threat hunting

English communication

Tools

SIEM platforms

EDR solutions

Threat intel platforms

Vulnerability management tools

Packet analysis tools

Job description

About the Role

We are seeking a seasoned SOC Engineer to join our Security Operations Center in Abu Dhabi. In this role you will leverage your expertise in security monitoring and detection to identify, analyze and respond to security threats. You will collaborate with cross-functional teams to enhance our security posture and ensure the protection of critical assets.

Responsibilities

• Continuously monitor security alerts and logs from SIEM and EDR platforms
• Triage and investigate security incidents performing root cause analysis
• Develop, tune, and deploy detection rules and correlation use cases in the SIEM
• Conduct threat hunting activities to proactively identify potential threats
• Collaborate with incident response team to contain and remediate security events
• Perform forensic analysis on compromised systems as needed
• Maintain and optimize SOC tools including SIEM, EDR, and related security technologies
• Produce clear and actionable incident reports and threat intelligence briefs
• Stay up to date with the latest threat landscapes and attack techniques

Preferred Qualifications

• Relevant certifications such as GCIA, GCIH, GCFE, CISSP, or CRISC
• Experience with cloud security monitoring AWS, Azure, or GCP
• Scripting skills in Python, PowerShell, or Bash for automation and tooling
• Knowledge of threat intelligence platforms and feed integration
• Hands‑on experience with vulnerability management and pentesting
• Arabic language proficiency
• Experience working in regulated environments, e.g. finance, government

Position Details

Position Title: SOC Engineers

Location: Abu Dhabi, UAE

Industry: Banking

Experience Required: 6 years

Required Qualifications: 6-8 years of hands‑on experience in a SOC environment. Proven expertise with SIEM platforms (deployment, rule writing, log analysis). Strong experience with EDR solutions (detection tuning, endpoint forensics). Deep understanding of security detection engineering and incident response methodologies. Proficiency in log analysis, packet analysis, and host-based forensics. Familiarity with MITRE ATT&CK framework and threat modeling. Solid networking fundamentals (TCP/IP, firewalls, IDS/IPS). Excellent analytical and problem‑solving skills. Effective communication skills in English.