Expert Engineer​/Security Operation Centre

# Expert Engineer/Security Operation Centre
* e& UAE
*** Abu Dhabi, Abu Dhabi Emirate
** Onsite
· Senior
· Full-time###

The Role The position sits within a security operations centre and covers end-to-end forensic investigations and incident response. Day-to-day work includes host-based and network forensics, malware triage, threat hunting using MITRE ATT&CK, cloud IR across AWS and Azure, and producing high-quality reports for technical and non-technical stakeholders while meeting SLA requirements.### Skills & Experience Candidates need at least six years of DFIR experience with strong hands-on use of EnCase, FTK, Cellebrite, Oxygen and Volatility, plus SIEM platforms such as Sentinel and Splunk.

SANS certifications — particularly GCFA, GCFE and GCIH — are required, alongside KQL query writing, Python or Power Shell scripting, and familiarity with Docker or Kubernetes.### Who It Suits This role suits an experienced DFIR practitioner who thrives in high-pressure SOC environments, is equally comfortable conducting deep host-level investigations and cloud forensics, and can clearly communicate complex findings to diverse audiences.

Those with broad investigation exposure beyond EDR and SIEM tooling will be particularly well placed.