XSOAR Specialist

Help AG; Abu Dhabi; Hybrid; AED 300,000 - 480,000; Full time

Benefits offered by this job

Health insurance

Career progression and growth

Learning and development opportunities

Annual flight tickets to home country

Flexible/Hybrid working environment

Job summary

Help AG is seeking a Cortex Security Orchestration & Automated Response (XSOAR) Specialist in the UAE. The role focuses on orchestration and automation of incident response, guiding customers on SOAR value both on-site and off-site.

The candidate will act as the SME for automation, integration and playbook development, partnering with Cyber Defense, Platforms & Architecture, and Managed Controls teams to deliver outcomes as agreed with customers.

Qualifications

• Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.
• Depth of Skills in at least three areas: Security Controls Operations, Cyber Incident Response, Cyber Security Detection, Managed Services Integration, Cyber Threat Intelligence, Threat Hunting.
• 3+ yrs experience in Cortex XSOAR (Demisto SOAR).
• Knowledge of cyber threats, TTPs and mitigations (on-prem, cloud, distributed).
• ITIL accreditation (or relevant experience).
• Experience integrating technologies with SOAR platforms.
• Experience designing and maintaining Playbooks for detection and response.
• Strong scripting and integration skills (Python, GO, Kusto/KQL, PowerShell).
• Expertise in SIEM, NGFW, CTI, WAF; familiarity with O365 and ITSM tools.

Responsibilities

• Lead technical development and optimization of automation processes and playbooks.
• Support pre-sales, sales, and business development of services.
• Collaborate with Cyber Defense, Platforms & Architecture, and Managed Controls teams.
• Support transition of customers and infrastructure into operations.
• Provide 24x7 on-call support for critical activities when required.
• Document processes, procedures, and SLAs; track KPIs and OLAs.
• Interface with Pre-Sales and Sales teams to achieve business outcomes.

Skills

Cortex XSOAR

Cyber Incident Response

Threat Hunting

Python

PowerShell

SIEM

Threat Intelligence

Communication

Team Leadership

Education

Degree in Computer Science or Information Systems

Tools

Cortex XSOAR

Office 365

ITIL

Job description

Help AG is looking for a talented and experienced Cortex Security Orchestration & Automated Response (XSOAR) Specialist who will be responsible for Orchestration and Automation of Incident Response. This role directly supports Help AG Customer engagements, working both off-site and on-site, leveraging SOAR solutions and their own knowledge of IT and security technologies to perform, guide and direct Customers in the value and implementation of SOAR.

This role is the primary technical and operational SME for Automation, Integration and Playbook development. This role works in conjunction with the Cyber Defense, Platforms & Architecture and Managed Controls teams to deliver successful outcomes as agreed between Help AG and its Customers.

Responsibilities:

• Technical and thought leadership, including optimization of process and systems.
• Support Pre-sales, Sales, and Business Development of new and existing services.
• Work with internal peers and external stakeholders to achieve effective and sustainable implementation and delivery of cyber defense services and associated service elements.
• Support the Service Transition process; Work with peers to effectively transition customers and infrastructure into operations.
• Work pro-actively and collaboratively with peers seeking mutually beneficial outcomes.
• Support rapid and effective detection, mitigation, containment and response to cyber security incidents leveraging integrations with, and capabilities of, Infrastructure Platforms, Tools, Assets under Management and non-Managed Customer Controls.
• Creation, optimization and documentation of processes, procedures and workflow; Tracking and reporting of SLAs, KPIs and OLAs.
• Initiate, support and manage incidents, problems, issues, risks and compliance activities; 24x7 on-call for critical or urgent activities as required.

Qualifications & Skills:

• Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.
• Depth of Skills in at least three of the following areas: Security Controls Operations, Cyber Incident Response, Cyber Security Detection, Managed Services Integration, Cyber Threat Intelligence, Threat Hunting.
• 3+ yrs experience in PAN Cortex XSOAR (Demisto SOAR).
• Working Knowledge of Cyber Threats, Threat Actors, TTPs and how to mitigate threats in different contexts (on-prem, cloud, distributed).
• CISSP, CISM, CISA (or equivalent experience).
• ITIL Accreditation (or relevant experience).
• Experience in integrating various technologies with SOAR platform.
• Experience in the design, implementation, maintenance and optimization of Playbooks for detection, protection, containment and mitigation of Cyber security related threats and incidents.
• Strong scripting and integration skills, in languages such as Python, GO, Kusto/KQL, PowerShell.
• Expert skills in Information Security Technologies (e.g. SIEM, NGFW, CTI, WAF) as well as IT systems, including Office 365, Service Management Tools, and the interfaces provided by IT & security systems that can be used for integration, automation and orchestration.
• Solid experience and understanding of Managed Security Service delivery, Cyber Security concepts and standards; Demonstrated experience in effectively managing and mitigating Security Events, Threat, Attacks and Vulnerabilities.
• Customer and Team-focused attitude.
• Outstanding organizational skills: Ability to lead and motivate skilled security professionals.
• Active listener; Excellent communication, presentation and training skills.
• Ability to interface with, and influence, Pre-Sales and Sales teams, to achieve agreed business outcomes.
• Flexible work approach, based on the job requirements.
• Strong interpersonal skills with the ability to collaborate well with others and reconcile differences among resources/departments.

Benefits:

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns activities throughout the year.
• Excellent learning and development opportunities.
• Annual flight tickets to home country.
• Inclusive and diverse working environment.
• Flexible/Hybrid working environment.
• Open door policy.

About Us:

Help AG, the cybersecurity arm of Etisalat, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer-first approach, Help AG delivers end-to-end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation. Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.