Senior IT Security Analyst ( UAE National )

Job Purpose

Principal Accountabilities

• Monitor, analyze, and investigate security events and alerts using SIEM, EDR, NDR, and other security platforms.
• Lead incident response activities, including containment, eradication, root cause analysis, and post‑incident reporting.
• Perform vulnerability assessments and coordinate remediation activities with infrastructure, application, and operations teams.
• Conduct regular security risk assessments and support risk treatment plans aligned with business objectives.
• Ensure implementation and effectiveness of security controls in line with ISO 27001, NIST, PCI DSS, and regulatory requirements.
• Support internal, external, and regulatory audits by providing evidence, explanations, and corrective action tracking.
• Analyze threat intelligence feeds and emerging cyber threats to proactively enhance detection and prevention capabilities.
• Review security architecture, system designs, and change requests to ensure security‑by‑design principles are applied.
• Manage and tune security tools and technologies to improve detection accuracy and reduce false positives.
• Coordinate with SOC, IT operations, and third‑party service providers on security monitoring and incident handling (as Level 3).
• Develop and maintain security procedures, playbooks, and standard operating procedures (SOPs).
• Support data protection and information classification initiatives, including security monitoring and incident handling.
• Perform periodic access reviews, privileged access monitoring, and support identity and access management controls.
• Track, report, and trend security metrics, incidents, and risk indicators for management and governance forums.
• Support business continuity, disaster recovery, and cyber resilience planning from a security perspective.
• Provide security guidance and awareness to IT and business teams to promote secure practices.

Education And Experience

• Bachelor’s degree in computer science, Information Technology, Information Systems, or related discipline.
• Equivalent professional experience may be considered in lieu of formal education where applicable.
• CISSP, CISM, CISA, or equivalent internationally recognized cyber security certification.
• Vendor‑specific security certifications (e.g., EDR, SIEM, Firewall, Cloud Security) are highly desirable.
• Minimum 5–8 years of hands‑on experience in IT Security Operations, Cyber Security, or Information Security roles.