Senior Cybersecurity Specialist

Role Overview

Cybersecurity Operations

• Lead cybersecurity operations, threat detection, incident response, threat hunting, and security posture improvement initiatives.
• Manage and optimize Microsoft Defender for Endpoint, Defender for Identity, Defender for Cloud, and Defender for Office 365.
• Administer Microsoft Sentinel analytics rules, KQL queries, workbooks, playbooks, threat hunting, and incident workflows.
• Deploy, manage, tune, and monitor Wazuh for endpoint monitoring, log analysis, compliance, and threat detection.
• Develop detection logic and response processes aligned with MITRE ATT&CK.
• Conduct security investigations, root cause analysis, threat hunting, and post-incident reporting.

Security Engineering

• Assess and improve web application security, including OWASP Top 10, WAF configuration, secure configurations, and vulnerability remediation.
• Strengthen Active Directory security through identity protection, privilege management, hardening, monitoring, and attack-path reduction.
• Review and improve network security controls, including firewalls, IDS/IPS, segmentation, VPN, secure remote access, and network monitoring.
• Develop security automation using PowerShell, Python, KQL, APIs, Logic Apps, n8n, and other workflow platforms.
• Automate alert triage, enrichment, notification, ticketing, containment, and security reporting processes.

Governance and Collaboration

• Support ISO 27001 and ISMS activities, including risk assessments, control reviews, internal audits, evidence collection, gap assessments, corrective actions, and continuous improvement.
• Collaborate with IT, infrastructure, cloud, network, and application teams to embed security into enterprise systems and processes.
• Support vulnerability management, security assessments, remediation tracking, documentation, runbooks, and security playbooks.

Required Skills and Experience

• At least 10 years of professional cybersecurity experience.
• Strong hands-on experience with the Microsoft Defender security suite and Microsoft Sentinel.
• Hands-on experience with Wazuh deployment, configuration, tuning, monitoring, and reporting.
• Strong practical understanding of MITRE ATT&CK and detection engineering.
• Strong knowledge of web application security, OWASP Top 10, WAF, and vulnerability remediation.
• Strong knowledge of Active Directory security, identity attacks, privilege escalation, lateral movement, hardening, and monitoring.
• Strong knowledge of network security, including firewalls, segmentation, VPN, IDS/IPS, secure protocols, and traffic analysis.
• Working knowledge of ISO 27001, ISMS, risk management, security controls, and audit requirements.
• Experience supporting ISO 27001 audits, control implementation, gap assessments, evidence collection, and remediation.
• Practical experience with security automation and scripting using PowerShell, Python, KQL, Logic Apps, n8n, APIs, or similar technologies.
• Strong understanding of enterprise security architecture, security operations, incident investigation, and risk management.

Preferred Skills

• Experience with n8n and security workflow automation.
• Experience with AI-assisted or AI-driven development approaches for security tools and automation.
• Microsoft Azure security experience.
• Advanced KQL development, detection rules, alert logic, dashboards, and workbooks.
• Experience integrating SIEM/SOAR platforms with ticketing systems, messaging platforms, threat intelligence, and endpoint security solutions.
• Knowledge of security frameworks, baselines, compliance requirements, and control maturity assessments.
• Ability to map technical controls and evidence to ISO 27001 requirements.
• Strong communication, documentation, analytical, and stakeholder management skills.

Preferred Certifications

• CISSP, CISM, ISO 27001 Lead Auditor or Lead Implementer, CEH, SANS GIAC, Microsoft SC-200, Microsoft AZ-500, and Microsoft SC-100 are preferred certifications.

Workplace

• The role is associated with a leading client in Abu Dhabi; the description does not explicitly state a workplace arrangement.