SOC Incident Response & Automation Engineer

e& UAE; Abu Dhabi; On-site; AED 180,000 - 260,000; Full time

Job summary

e& UAE is seeking a technical SOC Specialist with 3-5 years of experience to lead incident response and threat detection within its 24/7 Security Operations Center. The role covers the full incident lifecycle from triage to remediation, requiring strong Windows and Linux knowledge and the ability to design automated FortiSOAR playbooks.

The ideal candidate will tackle real-time monitoring, SIEM alert prioritization, and detailed threat analysis while documenting all actions in the ticketing

Qualifications

• BSc in Computer Science, Electrical/Computer/Software Engineering.
• Mandatory: SIEM Based Trainings, FortiSOAR Training.
• Preferred: GCIH Certified, Incident Handler Training, Linux+, Security+, CCNA, CCNA Security, FortiSOAR Certification.

Responsibilities

• Real-Time Monitoring: Provide continuous 24/7 oversight of security events and alerts.
• Triage & Prioritization: Manage and categorize alerts from SIEM, Anti-DDoS, and other security solutions based on urgency and risk.
• Incident Response Operations: Lead technical response activities, including host triage, containment, and recovery.
• Remediation & Analysis: Conduct remote system analysis and implement remediation efforts using strong correlation skills.
• Lifecycle Management: Maintain the full incident response lifecycle and ensure all actions adhere to established SLAs (Service Level Agreements).
• SOAR Optimization: Identify opportunities for automation in manual workflows and design automated playbooks and modules in the SOAR platform.
• Threat Analysis: Apply a detailed understanding of the MITRE ATT&CK Framework to identify and map attacker techniques.
• Threat Intelligence: Analyze global threat landscapes, including cyber threat intelligence, new vulnerabilities, and exploit code to stay ahead of adversaries.
• Vulnerability Assessment: Study vulnerabilities and provide technical recommendations for corrective actions and reporting.
• Platform Mastery: Maintain deep knowledge of Security Technologies, Operating Systems (Windows & Linux), and deep-packet analysis tools like Wireshark.
• Log Analysis: Utilize extensive experience in log correlation and analysis to detect and investigate suspicious patterns.
• Incident Documentation: Ensure all findings, communication, and mitigation steps are thoroughly recorded in the ticketing system.

Skills

Real-Time Monitoring

Triage & Prioritization

Incident Response

Remediation & Analysis

Threat Analysis

Threat Intelligence

Vulnerability Assessment

Log Analysis

KQL Queries

Windows & Linux

FortiSOAR

Education

BSc in Computer Science, Electrical/Computer/Software Engineering

Tools

FortiSOAR

ArcSight

Microsoft Sentinel

Wireshark

Job description

e& UAE is seeking a technical SOC Specialist with 3-5 years of experience to lead incident response and threat detection within its 24/7 Security Operations Center. The role covers the full incident lifecycle from triage to remediation, requiring strong Windows and Linux knowledge and the ability to design automated FortiSOAR playbooks.

The ideal candidate will tackle real-time monitoring, SIEM alert prioritization, and detailed threat analysis while documenting all actions in the ticketing