Security Engineer / SOC Lead

About the role

Requirements

• Minimum Experience and Qualifications
• •     Minimum 5 years of cybersecurity operations, SOC or incident-response experience.
• •     Practical experience with SIEM platforms such as Splunk, QRadar or equivalent.
• •     Strong knowledge of security monitoring, incident handling, network/endpoint telemetry and threat analysis.
• •     Security+, CEH, GCIA or equivalent certification preferred.
• •     Strong written reporting, stakeholder coordination and evidence-handling capability.
• Preferred Profile
• •     Previous experience supporting UAE government or regulated security environments.
• •     Working knowledge of TDRA security, hosting and incident coordination processes.
• •     Arabic language capability for onsite stakeholder coordination.
• Expected Contribution
• •     Security events are escalated and coordinated within the confirmed response procedures.
• •     Incident evidence, decisions, actions and dependencies remain traceable.
• •     The shared SOC and onsite teams operate with clear ownership and handoffs.
• •     Policy and risk decisions are not assumed without Entity authority.

Responsibilities

• • Coordinate security monitoring, alert triage and escalation with the shared SOC and relevant technical teams.
• • Lead operational response to confirmed security incidents in accordance with approved procedures and authority.
• • Collect and preserve technical evidence and maintain incident records, timelines and action tracking.
• • Coordinate containment, remediation, recovery and post-incident reviews with stakeholders.
• • Support security logging, SIEM integration, use-case tuning and monitoring coverage assessments.
• • Track technical security risks and remediation dependencies across infrastructure, network, cloud and applications.
• • Provide operational security reporting and support agreed awareness, exercise or readiness activities.
• • Escalate policy, compliance and risk-acceptance decisions to the authorised Entity function.

Skills

• SIEM (Splunk, QRadar)
• cybersecurity operations
• incident response
• security monitoring
• network telemetry
• endpoint telemetry
• threat analysis
• evidence handling
• security reporting
• incident containment
• post-incident reviews
• log management
• security governance