Senior SOC Analyst experience in NICE Framework in banking domain (Must)

We have an urgent requirement for Senior SOC Analyst experience in NICE Framework in banking   domain (Must) .is required for our banking clients in Abu Dhabi ,UAE

• Experience working within financial institutions, particularly with card-issuing  SWIFT-connected bank payment environments.--Must


• Expertise aligned with NICE Framework v2.2.0 work roles: Defensive Cybersecurity (PD-WRL-001), Incident Response (PD-WRL-003), and selected Threat Analysis (PD-WRL-006).--Must


• Advanced in Microsoft Sentinel and KQL ,FortiSOAR , FortiSOAR.S QRadar, F5 WAF, Palo Alto, and Fortinet firewall products.--Must

Role Overview:

The Senior SOC Analyst is an expert-level cybersecurity professional responsible for the deepest and most complex analysis within the Security Operations Center (SOC). Working primarily under the NICE Framework (NIST SP 800-181r1) Components v2.2.0, focusing on Defensive Cybersecurity, Incident Response, and selected Threat Analysis roles, this position leads 24/7 SOC operations with a specific focus on payment fraud detection and mitigation within a SWIFT-connected banking environment.Key Responsibilities:

• Lead and manage SOC shifts in a 24/7 operational environment, overseeing case queues, conducting shift handovers, and coordinating analyst teams during each shift cycle.


• Perform detailed incident, malware, and network traffic analysis across on-premises and multicloud ecosystems to fully assess the impact of malicious activities and resolve complex incidents within SOC authority.


• Analyze network traffic anomalies by inspecting flow, proxy, WAF, and firewall logs for command-and-control signals, beaconing, and data exfiltration.


• Apply deep MITRE ATT&CK Framework knowledge to identify adversary tactics and predict attacker behavior.


• Provide actionable recommendations on threat and vulnerability mitigation strategies to system owners based on observed attacker behavior.


• Continuously analyze cybersecurity posture trends by reviewing alert and incident patterns, especially in regulated zones.


• Support incident response by managing real-time handling of high-severity alerts and defining containment and remediation steps, including liaising with Payments teams for recall initiation on suspected fraudulent transfers.


• Preserve digital evidence integrity in a court-admissible manner, ensuring compliance with legal standards.


• Collaborate with Detection Engineering by feeding tuning requests and coverage gaps based on analysis findings.


• Mentor and support junior SOC analysts during demanding investigations.

Technical Skills and Knowledge:

• Expert understanding of cybersecurity principles, threats (including payment fraud, card data theft, ransomware, and business email compromise), and adversarial tactics.


• Profound knowledge of incident response principles, cyber attack stages, and key defensive security tools and platforms including Microsoft Sentinel, Defender XDR, FortiSOAR, QRadar, and cloud environments (AWS, Azure, Oracle Cloud).


• Strong skills in network protocols (TCP/IP, DNS, HTTP(S)), malware analysis, host and log file analysis (Windows and Linux), and command-line tools.


• Ability to perform incident analysis, event correlation, and digital evidence preservation at expert level.

Non-Technical Skills:

• Very strong communication, analytical thinking, decision-making, prioritization, and resilience.


• Strong cooperation, adaptability, organization, and quality awareness.

Product Knowledge:

• Advanced in Microsoft Sentinel and KQL.


• Very strong in FortiSOAR.


• Strong knowledge of QRadar, F5 WAF, Palo Alto, and Fortinet firewall products.