SOC Incident Response & Automation Engineer

e& UAE; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

e& UAE is seeking a technical SOC Specialist with 3-5 years of experience to drive incident response and threat detection in a 24/7 Security Operations Center. You will handle full incident lifecycle—from triage and traffic analysis to host recovery and remediation—and design automated SOAR playbooks to strengthen defenses.

The role requires deep Windows and Linux expertise, strong log analysis skills, and experience with SIEMs (ArcSight, Microsoft Sentinel) and threat intelligence.

Qualifications

• BSc in Computer Science, Electrical/Computer/Software Engineering.
• Mandatory: SIEM Based Trainings, FortiSOAR Training
• Preferred: GCIH Certification, Incident Handler Training, Linux+, Security+, CCNA, CCNA Security, FortiSOAR Certification
• Experience in Security Operations Center environments and handling cybersecurity incidents.
• Proficient with SIEM technologies (ArcSight, Microsoft Sentinel) and Threat Intelligence platforms.

Responsibilities

• Real-Time 24/7 monitoring and incident triage.
• Lead incident response, containment, and recovery activities.
• Perform log correlation and analysis to detect suspicious activity.
• Design and optimize SOAR playbooks and automation modules.
• Document findings and actions in the ticketing system with actionable remediation insights.

Skills

Incident response

Threat detection

Log analysis

KQL

SOAR automation

MITRE ATT&CK

Windows & Linux

Threat intelligence

Education

BSc in Computer Science / Electrical Engineering / Software Engineering

Tools

ArcSight

Microsoft Sentinel

FortiSOAR

Job description

e& UAE is seeking a technical SOC Specialist with 3-5 years of experience to drive incident response and threat detection in a 24/7 Security Operations Center. You will handle full incident lifecycle—from triage and traffic analysis to host recovery and remediation—and design automated SOAR playbooks to strengthen defenses.

The role requires deep Windows and Linux expertise, strong log analysis skills, and experience with SIEMs (ArcSight, Microsoft Sentinel) and threat intelligence.