SOC Security Specialist: Incident Response & Hunting

NorthBay Solutions LLC; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

NorthBay Solutions LLC in the UAE seeks a Cyber Security Specialist to support day-to-day security operations for a large enterprise client. The role focuses on SIEM monitoring, incident triage/response, EDR operations, vulnerability coordination, and maintaining ISO 27001, SOC 2, PCI/DSS-aligned security controls.

The candidate will work with cross-functional teams in a hybrid/on-prem environment, deliver high-quality incident reports, and help evolve detection capabilities within defined

Qualifications

• 7–8 years of experience in SOC / Cyber Security Operations / Incident Response.
• Hands-on SIEM operations experience (alerts, dashboards, reporting).
• Experience with EDR tools and endpoint investigation.
• Understanding incident response lifecycle and operational documentation discipline.
• Experience coordinating remediation with cross-functional teams in hybrid/on-prem environments.
• Knowledge of ISO 27001, SOC 2, PCI/DSS controls.

Responsibilities

• Monitor and analyze security events using SIEM, including alert triage and escalation.
• Execute incident response activities: triage, containment, evidence capture, and root-cause support.
• Operate and manage EDR tooling: policy management and endpoint investigation support.
• Coordinate vulnerability management activities: scanning, triage, remediation tracking.
• Perform basic threat hunting and proactive detection improvements.
• Maintain incident response playbooks, SOPs, and case documentation.
• Support ISO 27001, SOC 2, PCI/DSS compliance through evidence collection and controls.
• Coordinate with platform, network, and application teams to resolve security events.

Skills

SOC operations

Incident response

SIEM ops

EDR tooling

IR lifecycle

ISO 27001

SOC 2/PCI DSS

Tools

SIEM tooling

EDR tools

Job description

NorthBay Solutions LLC in the UAE seeks a Cyber Security Specialist to support day-to-day security operations for a large enterprise client. The role focuses on SIEM monitoring, incident triage/response, EDR operations, vulnerability coordination, and maintaining ISO 27001, SOC 2, PCI/DSS-aligned security controls.

The candidate will work with cross-functional teams in a hybrid/on-prem environment, deliver high-quality incident reports, and help evolve detection capabilities within defined