L1 SOC Analyst | UAE

We are actively seeking an experienced, high-caliber, and technical L1 SOC Analyst with 1 to 3 years of professional experience in security operations and threat monitoring to join our cybersecurity team in Abu Dhabi, UAE on a full-time permanent on-site rotational shift basis. In this critical security operations role, you will be responsible for triaging security alerts, investigating network anomalies, monitoring SIEM platforms, and escalating cyber threats.

You will leverage your deep specialist expertise in security information and event management (SIEM), security orchestration, automation, and response (SOAR), and the MITRE ATT&CK framework to deliver uncompromised digital defense and incident response readiness. This opportunity offers competitive compensation, executive technical visibility, and exceptional career growth prospects within a premier global cybersecurity and enterprise technology organization.

As an L1 SOC Analyst supporting enterprise security operations in Abu Dhabi, UAE, you will take full operational, tactical, and technical ownership of security alert triage, log inspection, incident escalation, and threat telemetry monitoring. Your day-to-day responsibilities include monitoring SIEM tools (Google Sec Ops/Chronicle, Splunk, Microsoft Sentinel, IBM QRadar, or Arc Sight), managing SOAR platforms (Palo Alto XSOAR, Splunk SOAR, IBM Resilient), analyzing firewall and TCP/IP network logs, mapping threats to the MITRE ATT&CK framework, and collaborating with senior incident responders during rotational shift coverage.

You will utilize your proactive troubleshooting and analytical skills to rapidly identify and neutralize cyber threats under strict service level agreements.

• Monitor enterprise security posture, review real-time security logs, and perform primary alert triage across multi-vendor SIEM dashboards.
• Execute hands-on log analysis utilizing SIEM platforms including Google Sec Ops/Chronicle, Splunk, Microsoft Sentinel, IBM QRadar, and Arc Sight.
• Leverage SOAR platforms such as Palo Alto XSOAR, Splunk SOAR, and IBM Resilient to automate incident response workflows.
• Apply knowledge of the MITRE ATT&CK framework to identify adversarial tactics, techniques, and procedures during alert triage.
• Investigate network traffic anomalies, inspect TCP/IP packet captures, DNS queries, HTTP/S traffic, and firewall audit logs.
• Escalate verified security incidents to Tier 2/Tier 3 incident responders with comprehensive technical documentation and artifact capture.
• Participate in rotational shift operations to ensure 24/7 continuous threat monitoring and uncompromised enterprise protection.
• Author meticulous incident tickets, shift handover reports, threat investigation notes, and standard operating procedures.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology (IT), or a related technical discipline.
• Minimum of 1 to 3+ years of progressive professional experience in a Security Operations Center (SOC) or IT security monitoring environment.
• Strong, demonstrable hands-on operational expertise with enterprise SIEM tooling (Google Sec Ops, Splunk, Sentinel, QRadar, Arc Sight).
• Practical familiarity with SOAR platforms (Palo Alto XSOAR, Splunk SOAR, IBM Resilient) and security automation.
• Solid understanding of core networking protocols (TCP/IP, DNS, HTTP/S) and perimeter firewall log structures.
• Comprehensive knowledge of the MITRE ATT&CK framework, threat intelligence feeds, and security alert lifecycle management.
• Exceptional analytical, troubleshooting, problem-solving, and crisis management capabilities under high-pressure security environments.
• Excellent written and verbal English communication skills with strong incident reporting abilities.
• Mandatory legal work eligibility in the United Arab Emirates and availability for full-time on-site rotational shift operations in Abu Dhabi.

• Professional cybersecurity certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or GIAC Continuous Monitoring (GMON).
• Foundational cloud security credentials (e.g., Microsoft Certified: Azure Security Engineer Associate, AWS Certified Security).
• Exposure to AI-assisted SOC workflows, machine learning log parsers, and automated threat hunting toolsets.
• Prior professional working experience in top-tier managed security service providers (MSSPs) or financial services SOC teams.