Senior SOC Security Analyst - Threat Detection and Response

Senior SOC Security Analyst
- Threat Detection and Response Job Snapshot
- Role:
Senior SOC Security Analyst
- Threat Detection and Response

- Location:

Abu Dhabi, United Arab Emirates
- Industry: Banking
- Function:
Computer-Network Security

- Experience:

Minimum 7 years
- Job Type: Full Time
- Work Arrangement:
On-site

Dicetek LLC is seeking an experienced Senior SOC Security Analyst for an immediate-start opportunity in Abu Dhabi, United Arab Emirates. The role focuses on monitoring, investigating and responding to cybersecurity threats across enterprise infrastructure, cloud platforms and application environments. The successful candidate will support Security Operations Centre (SOC) activities, investigate suspicious events, coordinate incident response and improve threat detection capabilities. The position requires practical experience with Security Information and Event Management (SIEM) platforms, endpoint and network security monitoring, threat hunting and Security Orchestration, Automation and Response (SOAR).

The specialist will also support cloud security monitoring across Microsoft Azure, Amazon Web Services (AWS) and other enterprise environments while maintaining accurate incident records, operational dashboards and security reporting.

• Country:
  United Arab Emirates
• City:
  Abu Dhabi
• Industry: Banking
• Function:
  Computer-Network Security
• Salary:
  Not disclosed
• Gender: No Preference
• Candidate Nationality:
  Not specified
• Job Type: Full Time
• Work Arrangement:
  On-site
• Required
  
  Start Date:
  
  Immediate

• Monitor security alerts across SIEM, endpoint, network and cloud security platforms.
• Analyse security events to identify suspicious activity and potential threats.
• Triage alerts according to their severity, relevance and potential impact.
• Investigate security events using available monitoring information and supporting evidence.
• Support security monitoring activities within a 24x7 SOC operating environment.
• Escalate confirmed or suspected incidents through established response procedures.
• Maintain accurate records of alert investigations and outcomes.

• Investigate suspicious activity affecting enterprise systems, applications and cloud environments.
• Coordinate incident response activities with relevant cybersecurity and technology teams.
• Analyse available security evidence to understand the nature and potential impact of incidents.
• Document investigation findings, root causes and remediation requirements.
• Track corrective actions arising from security incidents.
• Support timely resolution and appropriate escalation of security events.
• Maintain incident records suitable for operational review and reporting.

• Perform threat hunting to identify suspicious behaviour and potential security threats.
• Develop and refine security detection use cases.
• Tune detection rules to improve alert quality and reduce false positives.
• Identify gaps in existing security monitoring coverage.
• Use threat intelligence and security analytics to support investigations.
• Coordinate detection improvements with relevant SOC and engineering stakeholders.
• Monitor the effectiveness of implemented detection changes.

• Support security monitoring across Microsoft Azure and AWS environments.
• Investigate cloud-related security alerts and suspicious activity.
• Analyse endpoint security telemetry using relevant EDR or XDR capabilities.
• Review network security events as part of threat investigations.
• Correlate security information from multiple monitoring sources.
• Support visibility of threats affecting enterprise applications and infrastructure.

• Use SOAR capabilities to support security monitoring and incident response workflows.
• Identify opportunities to improve operational efficiency through automation.
• Support the development and refinement of automated security response activities.
• Review automation outcomes and investigate relevant operational issues.
• Coordinate automation improvements with security engineering teams.

• Maintain SOC dashboards and operational monitoring records.
• Prepare incident investigation reports and management updates.
• Document identified threats, investigation outcomes and corrective actions.
• Track outstanding remediation activities and operational…