SOC Lead - UAE National

CyberGate Defense L.L.C; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity firm in Abu Dhabi is seeking a motivated and experienced SOC Lead to lead a team of analysts in detecting and responding to cyber threats. The successful candidate will oversee the SOC operations, develop threat hunting strategies, and manage incident response efforts. Ideal applicants will have a Bachelor's degree in related fields, extensive SOC experience, and strong leadership skills. Relevant certifications like CISSP and CISM are preferred. This position offers a dynamic work environment focused on cybersecurity advancement.

Qualifications

• 5 years of experience in cybersecurity roles with at least 3 years in a SOC environment.
• Proven experience leading and mentoring security analysts.
• Strong understanding of cybersecurity concepts.

Responsibilities

• Lead and develop a high-performing team of security analysts.
• Oversee day-to-day operations of the SOC including threat monitoring.
• Lead incident response activities including containment and recovery.

Skills

Team Leadership

Threat Detection and Response

Incident Response Management

Security Monitoring and Analysis

Security Operations Improvement

Reporting and Communication

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

SIEM tools (e.g., Splunk, ELK Stack, QRadar)

Scripting languages (e.g., Python, PowerShell)

Job description

We are seeking a highly motivated and experienced SOC Lead to join our growing Security Operations Center. The successful candidate will be responsible for leading a team of security analysts in the detection, response and mitigation of cyber threats. This role requires strong leadership, technical expertise and a proactive approach to cybersecurity.

Key Responsibilities

• Team Leadership:
  • Lead mentor and develop a high‑performing team of security analysts.
  • Assign tasks, monitor performance and provide constructive feedback.
  • Foster a positive and collaborative team environment.
• Threat Detection and Response:
  • Oversee the day‑to‑day operations of the SOC including threat monitoring, incident response and security event correlation.
  • Analyze security logs, alerts and threat intelligence feeds to identify and investigate potential threats.
  • Develop and implement threat hunting strategies to proactively identify and mitigate threats.
• Incident Response Management:
  • Lead incident response activities including containment, eradication and recovery.
  • Develop and maintain incident response plans and playbooks.
  • Conduct post‑incident reviews and implement corrective actions.
• Security Monitoring and Analysis:
  • Monitor security tools and systems including SIEM, IDS/IPS and firewalls.
  • Analyze security events and identify trends and patterns.
  • Develop and tune security alerts and rules.
• Security Operations Improvement:
  • Continuously improve security operations processes and procedures.
  • Identify and implement new technologies and tools to enhance security capabilities.
  • Stay abreast of emerging threats and cybersecurity best practices.
• Reporting and Communication:
  • Prepare regular reports on security incidents and threats.
  • Communicate security risks and incidents to management and stakeholders.
  • Participate in security awareness training and education programs.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity or a related field.
• 5 years of experience in cybersecurity roles with at least 3 years of experience in a SOC environment.
• Proven experience leading and mentoring security analysts.
• Strong understanding of cybersecurity concepts including threat intelligence, vulnerability management and incident response.
• Experience with SIEM tools (e.g., Splunk, ELK Stack, QRadar).
• Proficiency in scripting languages (e.g., Python, PowerShell).
• Strong analytical and problem‑solving skills.
• Excellent communication, interpersonal and presentation skills.
• Strong leadership, organizational and time‑management skills.

Certifications (Preferred)

• CISSP, CISM, CISA, CEH or other relevant cybersecurity certifications.