Cyber Security and Threat Monitoring Specialist - SOC

We have an urgent requirement for Cyber Security and Threat Monitoring Specialist - SOC with experience in banking domain (Preferred) is required for our banking clients in Abu Dhabi ,UAE

Monitor and investigate cybersecurity threats across enterprise, cloud, endpoint, and network environments using SIEM and security monitoring platforms.--Must

Lead incident response activities, perform root cause analysis, coordinate remediation efforts, and maintain detailed incident documentation.--Must

Conduct threat hunting and detection engineering by developing, tuning, and optimizing use cases to improve detection coverage and reduce false positives.--Must

 Support SOC operations and cloud security monitoring while maintaining dashboards, operational reports, and security controls aligned with NIST and ISO 27001 standards.--Must

Role purpose

• Monitor, investigate, and respond to cyber threats across enterprise, cloud, and application environments while improving detection and operational readiness.

Key responsibilities

• Monitor and triage security alerts across SIEM, endpoint, network, and cloud security platforms.


• Investigate suspicious activity, coordinate incident response,e and document root cause and remediation.


• Perform threat hunting and develop or tune detection use cases to reduce false positives.


• Maintain SOC dashboards, incident records, and operational reports.


• Support cloud securityy monitoring across Azure, AWS, and other enterprise environments.

Required skills

• 24x7 SOC operations


• SIEM investigation using Microsoft Sentinel, Splunk, QRadar or equivalent


• Incident response and threat hunting


• Cloud, endpoint and network security monitoring


• SOAR automation and detection engineering


• NIST and ISO 27001-aligned security operations

Key deliverables

• Timely alert triage and documented investigations


• Improved detection coverage and reduced false positives


• Incident and executive reporting with tracked corrective actions

Certifications

• SC-200, AZ-500, CEH, Security+, CySA+ or equivalent desirable

Preferred tools / platforms

• Microsoft Sentinel


• Splunk/QRadar


• EDR/XDR


• SOAR


• Threat intelligence platforms