SOC OT L3

Cyber Gate Defense; United Arab Emirates; On-site; AED 335,000 - 469,000; Full time

Job summary

Cyber Gate Defense in the United Arab Emirates seeks an accomplished OT SOC L3 Analyst to detect advanced threats, execute deep investigations, and lead incident response within OT/ICS environments.

Responsibilities include FortiSIEM implementation and tuning, developing OT use cases, dashboards, and mentoring L1/L2 analysts to strengthen OT security posture and executive reporting.

Qualifications

• Hands-on FortiSIEM with rule creation, tuning and dashboards.
• OT/ICS security monitoring and threat detection expertise.
• Experience in incident response and threat hunting.
• Knowledge of ICs protocols and architectures (SCADA, DCS, PLCs).

Responsibilities

• Perform deep-dive analysis and investigation of OT security incidents.
• Lead incident response activities for critical OT threats.
• Analyze multi-source telemetry (network logs, endpoints, OT sensors).
• Develop and optimize FortiSIEM correlation rules and use cases for OT.
• Create and maintain custom dashboards and reporting for OT posture.
• Support RCA and remediation actions; mentor junior analysts.

Skills

FortiSIEM expertise

OT/ICS security monitoring

Incident response

Threat hunting

MITRE ATT&CK for ICS

Tools

FortiSIEM

Nozomi

Claroty

Dragos

Job description

The OT SOC L3 Analyst is responsible for advanced threat detection, deep investigation, and incident response within OT/ICS environments. This role includes implementation of FortiSIEM, fine-tuning FortiSIEM, developing use cases, creating dashboards, and leading complex incident analysis.

Key Responsibilities

• Perform deep-dive analysis and investigation of OT security incidents
• Lead incident response activities for critical OT threats
• Analyze multi-source telemetry (network logs, endpoints, OT sensors)
• Develop and optimize FortiSIEM correlation rules and use cases specific to OT
• Good Hands-on FortiSIEM implementation and operations support
• Create and maintain custom dashboards and reporting for OT security posture
• Identify and analyze advanced threats targeting ICs systems
• Support root cause analysis (RCA) and recommend remediation actions
• Collaborate with engineering teams to improve OT security architecture
• Mentor L1/L2 analysts and provide technical guidance
• Prepare executive-level reports and metrics dashboards

Role & responsibilities

Preferred candidate profile

• Proven hands-on experience with FortiSIEM (rule creation, tuning, dashboards)
• Strong expertise in OT/ICS security monitoring and threat detection
• Deep understanding of ICs protocols and architectures (SCADA, DCS, PLCs)
• Experience in incident response, forensic analysis, and threat hunting
• Knowledge of MITRE ATT&CK for ICs framework
• Strong understanding of network security, anomaly detection, and lateral movement in OT
• Experience integrating OT tools (e.g., Nozomi, Claroty, Dragos) is a plus