SOC Lead - UAE National

Cyber Gate Defense; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in Abu Dhabi is seeking an experienced SOC Lead to oversee operations within the Security Operations Center. The successful candidate will lead a team of security analysts, manage threat detection and incident response, and implement cybersecurity best practices. Required qualifications include a Bachelor's degree in Computer Science or Cybersecurity and over 5 years of experience in cybersecurity, particularly in a SOC environment. Competitive compensation is offered.

Qualifications

• 5+ years of experience in cybersecurity roles.
• At least 3 years of experience in a SOC environment.
• Proven experience leading and mentoring security analysts.

Responsibilities

• Lead and mentor a team of security analysts.
• Oversee threat monitoring and incident response operations.
• Develop incident response plans and conduct post-incident reviews.

Skills

Leadership

Incident Response

Threat Intelligence

Analytical Skills

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM tools (e.g., Splunk, ELK Stack, QRadar)

Scripting languages (e.g., Python, PowerShell)

Job description

We are seeking a highly motivated and experienced SOC Lead to join our growing Security Operations Center. The successful candidate will be responsible for leading a team of security analysts in the detection, response, and mitigation of cyber threats. This role requires strong leadership, technical expertise, and a proactive approach to cybersecurity.

Key Responsibilities

Team Leadership

• Lead, mentor, and develop a high-performing team of security analysts.
• Assign tasks, monitor performance, and provide constructive feedback.
• Foster a positive and collaborative team environment.

Threat Detection and Response

• Oversee the day-to-day operations of the SOC, including threat monitoring, incident response, and security event correlation.
• Analyze security logs, alerts, and threat intelligence feeds to identify and investigate potential threats.
• Develop and implement threat hunting strategies to proactively identify and mitigate threats.

Incident Response Management

• Lead incident response activities, including containment, eradication, and recovery.
• Develop and maintain incident response plans and playbooks.
• Conduct post-incident reviews and implement corrective actions.

Security Monitoring and Analysis

• Monitor security tools and systems, including SIEM, IDS/IPS, and firewalls.
• Analyze security events and identify trends and patterns.
• Develop and tune security alerts and rules.

Security Operations Improvement

• Continuously improve security operations processes and procedures.
• Identify and implement new technologies and tools to enhance security capabilities.
• Stay abreast of emerging threats and cybersecurity best practices.

Reporting and Communication

• Prepare regular reports on security incidents and threats.
• Communicate security risks and incidents to management and stakeholders.
• Participate in security awareness training and education programs.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity roles, with at least 3 years of experience in a SOC environment.
• Proven experience leading and mentoring security analysts.
• Strong understanding of cybersecurity concepts, including threat intelligence, vulnerability management, and incident response.
• Experience with SIEM tools (e.g., Splunk, ELK Stack, QRadar).
• Proficiency in scripting languages (e.g., Python, PowerShell).
• Strong analytical and problem‑solving skills.
• Excellent communication, interpersonal, and presentation skills.
• Strong leadership, organizational, and time‑management skills.

Certifications (Preferred)

• CISSP, CISM, CISA, CEH, or other relevant cybersecurity certifications.