linkedin
Senior SOC Analyst / Cybersecurity Engineer
Malcrove
Dubai, UAE
Full-time
Mid-Senior
Onsite
Discovered 1 weeks ago
SOC operationsIncident responseCybersecurity engineeringMicrosoft Defender XDRMicrosoft SentinelLogRhythm
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
SOC operationsIncident responseCybersecurity engineering
Role Overview
Manage day-to-day security monitoring, incident investigation, threat hunting, vulnerability management, and security platform administration.
Act as an escalation point for SOC analysts and coordinate security activities with internal teams and external vendors.
Key Skills for This Role
SOC operationsIncident responseCybersecurity engineeringMicrosoft Defender XDRMicrosoft SentinelLogRhythm
Full Job Posting
Job Purpose
Manage day-to-day security monitoring, incident investigation, threat hunting, vulnerability management, and security platform administration.
Act as an escalation point for SOC analysts and coordinate security activities with internal teams and external vendors.
Key Responsibilities
- Monitor and investigate alerts across Microsoft Defender XDR, Microsoft Sentinel, LogRhythm, Entra ID, Exchange, firewalls, and other platforms.
- Investigate phishing, compromised accounts, malware, suspicious sign-ins, unauthorized applications, and endpoint or network threats.
- Perform threat hunting with KQL, indicators of compromise, and MITRE ATT&CK techniques.
- Contain incidents by isolating endpoints, blocking indicators, disabling accounts, revoking sessions, and removing phishing emails.
- Administer and troubleshoot LogRhythm alarms, AIE rules, reports, log sources, queues, indexing, integrations, storage, and system health.
- Manage Microsoft Defender policies, endpoint onboarding and health, antivirus updates, ASR rules, indicators, exclusions, and application controls.
- Review Tenable/Nessus findings, coordinate remediation, verify closure, and assess exposure from new CVEs and advisories.
- Develop and tune SIEM detection rules to improve coverage and reduce false positives.
- Coordinate with infrastructure, network, application, database, cloud, GRC, and vendor teams.
- Prepare incident reports, technical findings, operational updates, and remediation recommendations.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career