Senior SOC Engineer NDR VM

TALENTMATE, Abu Dhabi, UAE

The Senior Engineer – SOC (NDR & VM) will be a technically proficient SOC Engineer to join our Security Operations Center (SOC) team. This role focuses on deploying and managing Network Detection and Response (NDR) and Vulnerability Management tools. The ideal candidate will be hands‑on, detail‑oriented, and passionate about cybersecurity operations.

• Contribute to the architecture design to deploy the NDR tool customized to the client’s environment.
• Deploy and manage the NDR solutions to monitor network traffic and detect malicious activity (e.g., Core Light, Dark Trace, Vectra).
• Analyze network telemetry and behavioural patterns to identify threats such as lateral movement, data exfiltration, and command-and-control communications.
• Develop and fine‑tune detection logic, signatures, and machine learning models to improve threat visibility.
• Integrate NDR platforms with SIEM and SOAR tools to enable automated alerting and response.
• Write and tune network signatures; possess knowledge of Suricata and Snort rule writing.
• Deploy and manage VM tools like Qualys, Tenable, or Rapid
  7.
• Handle end‑to‑end vulnerability management lifecycle: scanning, assessment, prioritization, and remediation tracking.
• Collaborate with infrastructure and application teams to ensure timely patching and mitigation of identified vulnerabilities.
• Maintain a centralized vulnerability dashboard and generate executive‑level reports with risk‑based metrics.
• Ensure alignment with regulatory requirements pertaining to the client industry.
• Assist in investigation and response to security incidents, leveraging NDR and vulnerability data.
• Work closely with SOC team, threat hunting and threat intelligence teams to contextualize alerts and improve detection capabilities.
• Contribute to the development of SOC playbooks and SOPs.
• Prove proficiency in NDR tools (e.g., Corelight, Vectra AI, Darktrace) and vulnerability management tools (e.g., Qualys, Tenable, Rapid7).
• Strong understanding of TCP/IP, DNS, HTTP/S, and other network protocols.
• Diagnose and troubleshoot network issues related to network detections.
• Strong understanding of SOC operations, cybersecurity principles, and best practices.

• Certified Information Systems Security Professional (CISSP), OSCP, or GIAC desirable.
• Networking certifications such as CCNA or CCNP advantageous.
• Proven expertise in NDR platforms (Corelight, Vectra AI, Darktrace, etc.) and vulnerability management tools (Qualys, Tenable, Rapid7).
• Vendor certifications for NDR product/s.
• Strong understanding of TCP/IP, DNS, HTTP/S, and other network protocols.
• Experience integrating vulnerability tools with ticketing systems (Service Now, Jira) and CMDBs.
• Prior experience in a technical role within a SOC or similar cybersecurity environment.
• Minimum of 5 years of experience in SOC operations, with significant experience in NDR and Vulnerability Management.
• Bachelor’s degree in computer science, information technology, cybersecurity or related field.

• Role Level: Mid-Level
• Work Type:
  Full-Time
• Country:
  United Arab Emirates
• City:
  Abu Dhabi
• Company: TALENTMATE
• Job Function:
  Engineering
• Industry: Computer and Network Security