SOC L2 Consultant: Detection Engineering & MSS Ops

iConnect IT Business Solutions DMCC; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

iConnect IT Business Solutions DMCC is seeking an experienced SOC L2 - SOC & MSS Consultant to support hands-on operation, tuning and continuous improvement of security platforms across client environments.

You will lead SIEM operations, develop detection content, and build SOAR playbooks to automate triage and response in a 24x7 managed SOC setting. Strong FortiSIEM, FortiSOAR, and Bitdefender GravityZone experience is required.

Qualifications

• Bachelor's degree in CS, Info Security or related field.
• 3–5 years SOC experience with at least 2 years at L2.
• Hands-on with enterprise SIEM; FortiSIEM strongly preferred.
• Experience developing SOAR playbooks; FortiSOAR preferred.
• Practical EDR/AV management in enterprise or multi-client envs.
• Bitdefender GravityZone experience required.
• Experience with FortiMail/Proofpoint/Mimecast.
• Knowledge of DLP and data classification.
• Strong MITRE ATT&CK and incident response.

Responsibilities

• SIEM operations, correlation tuning, and log-source onboarding.
• Detection engineering and MITRE ATT&CK coverage.
• SOAR playbook and workflow development for automated triage, enrichment and response.
• EDR/AV administration, alert investigation, containment and threat hunting.
• Email security operations, including anti-phishing, anti-malware, SPF/DKIM/DMARC.
• DLP policy management and data classification.
• L2 incident investigation, incident response and post-incident improvements.
• Client reporting, health checks, tuning recommendations and MSS onboarding.

Skills

SOC operations

MITRE ATT&CK

SOAR playbooks

EDR/AV administration

DLP & data classification

SIEM tuning

Incident response

Threat hunting

Scripting: Python/PowerShell

Education

Bachelor's degree in Computer Science, Information Security or a related field

Tools

FortiSIEM

FortiSOAR

Bitdefender GravityZone

FortiMail

Proofpoint

Mimecast

Job description

iConnect IT Business Solutions DMCC is seeking an experienced SOC L2 - SOC & MSS Consultant to support hands-on operation, tuning and continuous improvement of security platforms across client environments.

You will lead SIEM operations, develop detection content, and build SOAR playbooks to automate triage and response in a 24x7 managed SOC setting. Strong FortiSIEM, FortiSOAR, and Bitdefender GravityZone experience is required.