SOC & Incident Response Cyber Security Specialist

Tanqeeb; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

Tanqeeb in UAE is hiring a Cyber Security Specialist (SOC / Incident Response) to operationally support day-to-day cybersecurity activities for a large enterprise client. The role focuses on SIEM monitoring, incident triage/response, EDR operations, and maintaining compliance-aligned security operations with ISO 27001, SOC 2, and PCI DSS.

Responsibilities include monitoring security events, coordinating remediation, maintaining playbooks, and collaborating with platform, network, and application

Qualifications

• 7–9 years in SOC/Cyber Security Operations/Incident Response.
• Hands-on SIEM operations, alerts, dashboards, and reporting.
• Strong experience with EDR tools and endpoint investigations.
• Understanding incident response lifecycle and runbooks.
• Experience coordinating remediation across hybrid/on-prem environments.
• Knowledge of ISO 27001, SOC 2, PCI/DSS controls.

Responsibilities

• Monitor and analyze security events using SIEM, including alert triage, correlation validation, and escalation handling
• Execute incident triage, containment, evidence capture, and root-cause analysis support
• Operate and manage EDR tooling: policy actions, alert handling, containment, and investigations
• Coordinate vulnerability scanning, triage, remediation tracking, and verification
• Perform basic threat hunting and detection improvements based on observed patterns
• Maintain incident response playbooks and security reporting
• Coordinate with platform, network, and application teams to resolve security events within defined timelines

Skills

SOC/IR

SIEM operations

EDR

Incident response

Cross-functional coordination

ISO 27001/SOC 2/PCI-DSS

Tools

SIEM

EDR

Job description

Tanqeeb in UAE is hiring a Cyber Security Specialist (SOC / Incident Response) to operationally support day-to-day cybersecurity activities for a large enterprise client. The role focuses on SIEM monitoring, incident triage/response, EDR operations, and maintaining compliance-aligned security operations with ISO 27001, SOC 2, and PCI DSS.

Responsibilities include monitoring security events, coordinating remediation, maintaining playbooks, and collaborating with platform, network, and application