Cyber Security Engineer

Job Summary

Security Monitoring and Incident Response

• Monitor and triage alerts from SIEM platforms such as Wazuh, Splunk, Microsoft Sentinel, and ELK.
• Analyze logs, events, and threats across endpoints, networks, and cloud systems.
• Participate in incident response, root cause analysis, and recovery.
• Investigate phishing, malware, and suspicious behavior incidents.
• Collaborate with IT teams to enforce security controls and reduce attack surfaces.

Governance, Risk, and Compliance

• Maintain and enforce security policies, procedures, and documentation.
• Assist with internal audits, control testing, and compliance assessments against ISO 27001, NIST, HIPAA, and GDPR.
• Maintain and update the organization's risk register.
• Support user training and organization-wide security awareness.
• Contribute to disaster recovery and business continuity planning from a security perspective.

Vulnerability and Threat Management

• Perform and analyze vulnerability scans using Nessus, Qualys, or similar platforms.
• Contribute to vulnerability detection solutions and track remediation of security gaps.
• Report on security posture trends and maintain awareness of threat intelligence feeds, zero-day exploits, and CVEs.
• Document Indicators of Compromise and support internal threat intelligence initiatives.

Tooling and Automation

• Tune SIEM and SOAR rules and dashboards to improve detection accuracy.
• Contribute to automation workflows such as alert enrichment and threat classification.
• Integrate compliance and security checks into CI/CD pipelines or infrastructure as code where applicable.

Required Skills and Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3–8+ years of experience in cybersecurity operations, compliance, or SOC, depending on level.
• Strong hands-on experience with SIEM tools.
• Deep familiarity with ISO 27001, NIST, CIS, GDPR, and HIPAA.
• Prior use or development experience with vulnerability management tools.
• Understanding of Windows, Linux, and cloud environments.
• Excellent analytical, documentation, and communication skills.

Preferred Certifications

• CompTIA Security+ or CySA+.
• ISO 27001 Lead Implementer or Lead Auditor.
• SC-200 Microsoft Security Operations Analyst.
• CISA, CISM, or an equivalent GRC-related credential.

Compensation

• Pay is AED 4,000–5,000 per month.

Workplace

• The work location is in person.