SOC Lead

spiderSilk; Dubai; Hybrid; AED 240,000 - 360,000; Full time

Job summary

spiderSilk is seeking a Detection and Response Engineer in Dubai/Abu Dhabi to own corporate IT operations end to end and validate investigations from SOC alerts. You will lead IAM, device management, and networking across sites, while aligning IT controls with SOC 2 and ISO 27001.

A hands-on senior engineer mindset is essential. You will also drive ITSM processes, vendor coordination, and budget management, with a focus on security-centered operations and incident response readiness in a

Qualifications

• Proven experience owning corporate IT end to end, including fleet management and onboarding/offboarding at scale.
• Hands-on IAM management across multiple platforms.
• MDM and device estate management experience with policy enforcement.
• Admin level proficiency with Microsoft 365 and Google Workspace.
• Networking and connectivity experience including firewalls and VPNs.

Responsibilities

• Own corporate IT operations and infrastructure, including endpoint fleet and lifecycle management.
• Run identity and access management; manage joiner/mover/leaver processes and access reviews.
• Manage device estate via MDM; enforce baseline configurations and patches.
• Administer productivity/SaaS stack, licensing, and app governance.
• Own networking across sites; manage firewalls, VPN, Wi‑Fi and switching.
• Maintain SOC 2 and ISO 27001 controls; coordinate with security on EDR.
• Run the service desk: tickets, SLAs, escalations, reporting.
• Lead a small IT/helpdesk team and manage vendors and budgets.

Skills

IT operations

IAM

MDM management

Admin: M365/Google Workspace

Networking & VPN

SOC 2 / ISO 27001

ITSM ownership

Vendor & budget management

Tools

Okta

Azure AD / Entra ID

JumpCloud

Google Workspace Admin

Intune

Jamf

Kandji

Mosyle

Jira Service Management

Freshservice

ServiceNow

Zendesk

Fortinet

Palo Alto

Cisco Meraki

Zscaler

Job description

Detection and Response Engineer

Location: Dubai/Abu Dhabi
Department: Engineering
Reports To: CTO
Who We Are!

Back in 2019, spiderSilk was born with a bold idea: build regional, sovereign cybersecurity IP that could stand tall on the global stage.

Our mission? To shake up the way organizations protect their ever-changing digital worlds with continuous, intelligent, and autonomous security that doesn’t miss a beat.

We’re a global mix of curious minds, problem-solvers, and passionate builders, all united by one goal: making the internet a safer place for everyone. Around here, we thrive on vision, energy, and a strong sense of ownership.

If this feels like your kind of crew, you’ll probably fit right in.

About the Role

Today, when SilkRunner investigates an alert, we largely rely on the agents themselves to tell us whether the investigation was good. We need a human with real SOC experience to own that judgement.

You will be the person who looks at an agent-generated investigation and says whether it holds up: is the conclusion valid, is the evidence sufficient, is it comprehensive enough that an L1 or L2 analyst could actually act on it, or does it need more. You will then hold that same conversation with customers, with the credibility of someone who has run these investigations themselves and seen what their own team produced.

This is a hands‑on technical role, not a people management role. We are looking for the senior engineer or SOC lead who stayed close to the incidents, not someone who moved away from them.

Responsibilities

• Own corporate IT operations and infrastructure, including the endpoint fleet and the full onboarding and offboarding lifecycle
• Run identity and access management: SSO, provisioning, joiner/mover/leaver flows, access reviews and least privilege
• Manage the device estate through MDM, including enrolment, baseline configuration, patching and compliance policy
• Administer our productivity and SaaS stack, including licensing, tenant configuration and app governance
• Own networking and connectivity: firewalls, VPN, Wi‑Fi and switching across our sites
• Keep IT controls aligned to SOC 2 and ISO 27001, and work with security on endpoint protection and EDR coverage
• Run the service desk: ticketing, SLAs, escalation paths and the reporting that shows where the recurring pain is
• Lead and develop a small IT and helpdesk team, and manage vendors, contracts and IT budget

What you will bring

• Proven experience owning corporate IT end to end, including endpoint fleet management and onboarding and offboarding at scale
• Strong hands‑on identity and access management: Okta, Microsoft Entra ID (Azure AD), JumpCloud or Google Workspace
• Device and endpoint management through MDM: Intune, Jamf, Kandji or Mosyle
• Microsoft 365 and/or Google Workspace administration at admin level, not end user level
• Networking and connectivity experience across firewalls, VPN, Wi‑Fi and switching, with tools such as Fortinet, Palo Alto, Cisco Meraki or Zscaler
• IT security and compliance experience, including SOC 2 and ISO 27001 control ownership or audit support, and endpoint security or EDR. Given that we are a security company, this is weighted heavily
• Service desk and ITSM ownership using Jira Service Management, Freshservice, ServiceNow or Zendesk
• Experience leading a small IT or helpdesk team, and managing vendors and budgets

Nice to have

• Experience in a regulated or high-security environment
• Scripting or automation for provisioning and fleet management (PowerShell, Python, Bash)
• Multi-site or multi-region IT support experience across the GCC