Specialist Cyber Defense Centre

Synechron; Abu Dhabi; On-site; AED 80,000 - 110,000; Full time

Benefits offered by this job

Flexible workplace arrangements

Mentoring and development programs

Job summary

A global cybersecurity firm is seeking a Specialist - Cyber Defense Centre to enhance its defenses. This role involves conducting threat hunting, leading incident response efforts, and monitoring security tools. Candidates should have 3-5 years of experience in cybersecurity, strong analytical skills, and a relevant degree. Familiarity with SIEM platforms, scripting skills in Python, and cybersecurity certifications are highly preferred. Join a collaborative team committed to safeguarding digital assets and improving organizational security posture.

Qualifications

• Minimum of 3-5 years of experience in cybersecurity roles focused on threat detection.
• Proven experience supporting cyber defense operations in enterprise environments.
• Certifications such as CISSP, CEH are highly preferred.

Responsibilities

• Conduct proactive threat hunting activities to identify cyber threats.
• Lead incident response efforts and coordinate containment actions.
• Monitor and enhance security tools for increased detection efficacy.

Skills

Scripting skills in Python

Experience with SIEM Platforms

Knowledge of cloud environment security

Analytical skills

Excellent communication skills

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Splunk

IBM QRadar

Azure Sentinel

CrowdStrike

Job description

Job Summary

Synechron is seeking a skilled and dedicated Specialist - Cyber Defense Centre to strengthen our cybersecurity defenses. This pivotal role involves supporting advanced cyber defense operations through proactive threat hunting, incident response, and security analytics. The Specialist will collaborate closely with SOC analysts, cybersecurity teams and IT operations teams to detect, investigate, contain and remediate cyber threats. The overarching goal is to enhance the organization’s security posture, improve detection capabilities and ensure rapid and effective responses to cyber incidents, thereby safeguarding our digital assets and business continuity.

Software Requirements

Required Software Skills:

• SIEM Platforms: Splunk, IBM QRadar or Azure Sentinel (expertise in configuration and operational management)
• Endpoint Detection and Response (EDR/NDR): Experience with platforms such as CrowdStrike, Microsoft Defender or Palo Alto Cortex XDR
• Security Orchestration, Automation and Response (SOAR): Familiarity with Palo Alto Cortex XSOAR, Splunk SOAR or similar tools
• Threat Intelligence Platforms and feeds
• Log analysis and network forensic tools

Preferred Software Skills

• Cloud Security Tools for AWS, Azure, GCP
• Threat hunting frameworks and scripting (Python, PowerShell)
• Digital investigation tools

Overall Responsibilities

• Conduct proactive threat hunting activities to identify hidden or emerging cyber threats using advanced analytics and intelligence sources.
• Support and lead incident response efforts by investigating security incidents, coordinating containment, eradication and recovery actions.
• Monitor, tune and enhance security tools such as SIEM, EDR, NDR and SOAR to increase detection efficacy.
• Analyze security data to identify trends, generate detailed reports and develop dashboards for leadership insights.
• Collaborate with cross‑functional teams to improve detection rules, develop incident response playbooks and conduct cyber drills.
• Validate security controls regularly to ensure readiness and effectiveness.
• Maintain comprehensive documentation of investigations, findings and lessons learned for continuous improvement.

Technical Skills (By Category)

• Programming Languages:
  • Required: Scripting skills in Python or PowerShell
  • Preferred: Knowledge of additional languages such as Bash or Perl
• Databases / Data Management:
  • Experience with log management and analysis of large datasets
• Cloud Technologies:
  • Experience with cloud environment security (AWS, Azure, GCP) is an advantage
• Frameworks and Libraries:
  • Familiarity with MITRE ATT&CK framework and TTPs
• Development Tools and Methodologies:
  • Familiar with security automation, incident response frameworks and Agile methodologies
• Security Protocols & Standards:
  • Knowledge of TCP/IP, SSL/TLS, VPNs, firewalls and encryption protocols

Experience Requirements

• Minimum of 3‑5 years of experience in cybersecurity roles specifically in threat detection, incident response or security operations.
• Proven experience supporting or leading cyber defense operations in enterprise environments.
• Familiarity with security frameworks, threat intelligence and forensics.
• Industry experience in financial services, technology or related sectors preferred.
• Candidates with relevant certifications or alternative security training programs are encouraged to apply.

Day‑to‑Day Activities

• Perform continuous monitoring and analysis of security alerts and logs.
• Conduct threat hunting exercises and update detection content.
• Lead or support incident investigations, coordinating with stakeholders.
• Tune security tools and develop automated detection workflows.
• Participate in team meetings, tabletop exercises and security drills.
• Produce reports, dashboards and incident summaries for stakeholders.
• Engage in knowledge sharing and continuous learning initiatives.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or an equivalent qualification.
• Certifications such as CISSP, GSEC, GIAC, CEH or relevant vendor‑specific accreditations are highly preferred.
• Ongoing professional development in cybersecurity tools, threat intelligence and incident response.

Professional Competencies

• Strong analytical and investigative skills to analyze complex security threats.
• Excellent communication skills for technical reporting and stakeholder engagement.
• Proven ability to work collaboratively in a team environment and across departments.
• High attention to detail and a methodical approach to investigations.
• Adaptability to evolving threats and technology landscapes.
• Critical thinking and problem‑solving capabilities to develop effective mitigation strategies.
• Ethical judgment in handling sensitive information with integrity.

Diversity & Inclusion Statement

Diversity & Inclusion are fundamental to our culture and Synechron is proud to be an equal‑opportunity workplace and an affirmative action employer. Our Diversity, Equity and Inclusion (DEI) initiative, Same Difference, is committed to fostering an inclusive culture that promotes equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company.

We encourage applicants from across diverse backgrounds, race, ethnicity, religion, age, marital status, gender, sexual orientation and disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disability or veteran status or any other characteristic protected by law.