SOC L1 Analyst - ArcSight Expertise Required

CyberGate Defense L.L.C; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity firm in Abu Dhabi is seeking a SOC L1 Analyst with a strong ArcSight background to enhance their Security Operations Center. In this role, you will monitor security alerts, analyze incidents, and document responses, ensuring the protection of digital assets. The ideal candidate will have 3-5 years of SOC experience, excellent analytical skills, and a relevant degree. Opportunities for professional growth are abundant in this supportive environment.

Qualifications

• 3-5 years of experience in a Security Operations Center (SOC) environment.
• Proven experience with ArcSight for security monitoring and alert analysis.
• Foundational knowledge of cybersecurity concepts and network protocols.

Responsibilities

• Continuously monitor security alerts and events generated by ArcSight and other security tools.
• Perform initial investigation and analysis of security incidents.
• Accurately document all security incidents and remediation steps.

Skills

ArcSight expertise

Security monitoring

Incident analysis

Troubleshooting

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

ArcSight

SIEM platforms

Windows

Linux

Job description

Hiring: SOC L1 Analyst - ArcSight Expertise Required!

CyberGate Defense is rapidly expanding its Security Operations Center (SOC) team and is looking for a passionate and detail-oriented SOC L1 Analyst with hands‑on experience in ArcSight to join us in Abu Dhabi, UAE. As a SOC L1 Analyst at CyberGate Defense you will be on the front lines of our security operations, playing a crucial role in the initial detection and analysis of cyber threats and ensuring the continuous protection of our digital assets. This is an excellent opportunity to grow your skills in a fast‑paced and supportive team.

Key Responsibilities

• 24/7 Security Monitoring: Continuously monitor security alerts and events generated by our SIEM platform (ArcSight) and other security tools.
• Initial Triage & Analysis: Perform initial investigation and analysis of security incidents, identifying false positives and escalating genuine threats.
• Incident Documentation: Accurately document all security incidents, investigations and remediation steps in our incident management system.
• Alert Management: Manage and respond to security alerts, prioritizing based on severity and potential impact.
• Basic Troubleshooting: Conduct basic troubleshooting of security tools and systems, escalating complex issues to L2/L3 analysts.
• Reporting: Assist in generating daily and weekly security reports.
• Stay Updated: Keep abreast of the latest cybersecurity threats, vulnerabilities and industry best practices.

Qualifications & Skills

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent practical experience).
• 3–5 years of hands‑on experience in a Security Operations Center (SOC) environment.
• Proven hands‑on experience with ArcSight SIEM for security monitoring, alert analysis and basic correlation.
• Foundational understanding of cybersecurity concepts, common attack vectors and network protocols (TCP/IP, HTTP, DNS, etc.).
• Familiarity with operating systems (Windows, Linux) and common security devices (Firewalls, IDS/IPS).
• Ability to work effectively in a fast‑paced environment and handle multiple tasks.
• Excellent analytical, problem‑solving and critical‑thinking skills.
• Strong written and verbal communication skills.
• Relevant certifications (e.g., CompTIA Security+, CySA, ArcSight ACIA/ACSA) are a strong plus.

If you’re ready to launch or advance your career in cybersecurity and have the ArcSight experience we’re looking for, we encourage you to apply! To Apply: Please submit your resume and a brief cover letter outlining your relevant experience.