Security Engineer / SOC Lead

Responsibilities

• ● Act as the onsite operational security focal point, coordinating security monitoring, incident response, technical remediation and reporting with shared SOC.
• ● Policy ownership, regulatory accountability and risk acceptance remain with the Entity.
• ● Coordinate security monitoring, alert triage and escalation with the shared SOC and relevant technical teams.
• ● Lead operational response to confirmed security incidents in accordance with approved procedures and authority.
• ● Collect and preserve technical evidence and maintain incident records, timelines and action tracking.
• ● Coordinate containment, remediation, recovery and post-incident reviews with stakeholders.
• ● Support security logging, SIEM integration, use-case tuning and monitoring coverage assessments.
• ● Track technical security risks and remediation dependencies across infrastructure, network, cloud and applications.
• ● Provide operational security reporting and support agreed awareness, exercise or readiness activities.
• ● Escalate policy, compliance and risk-acceptance decisions to the authorised Entity function.
• ● Minimum Experience and Qualifications
• ● Minimum 5 years of cybersecurity operations, SOC or incident-response experience.
• ● Practical experience with SIEM platforms such as Splunk, QRadar or equivalent.
• ● Strong knowledge of security monitoring, incident handling, network/endpoint telemetry and threat analysis.
• ● Security+, CEH, GCIA or equivalent certification preferred.
• ● Strong written reporting, stakeholder coordination and evidence-handling capability.
• ● Preferred Profile
• ● Previous experience supporting UAE government or regulated security environments.
• ● Working knowledge of TDRA security, hosting and incident coordination processes.
• ● Arabic language capability for onsite stakeholder coordination.