Senior Specialist - Security Operations (Space42)

About Us

Role Purpose

Security Monitoring & Incident Response

• Monitor SIEM, EDR, NDR, and other security tools for suspicious activity and security events.
• Perform triage, investigation, containment, eradication, and recovery of security incidents.
• Correlate logs from network, endpoint, cloud, and application sources to detect malicious behaviour.
• Develop and manage SIEM use cases and alert tuning to reduce false positives.
• Support digital forensics and post-incident analysis.
• Maintain incident documentation and reporting aligned with regulatory requirements.
• Coordinate with internal teams and external stakeholders during security incidents.

Intrusion & Threat Analysis

• Analyze network telemetry, endpoint logs, and threat feeds to identify intrusion attempts.
• Correlate Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs) with known threat actor campaigns.
• Provide threat context, attribution insights, and intelligence support to investigations.
• Develop detection logic using Sigma, Snort, YARA, and custom scripts.
• Conduct proactive threat hunting based on emerging intelligence.

Malware Analysis & Reverse Engineering

• Perform static and dynamic malware analysis using tools such as Ghidra, IDA Pro, x64dbg, and Cuckoo Sandbox.
• Reverse engineer obfuscated binaries and scripts to identify payloads, persistence techniques, and command-and-control (C2) infrastructure.
• Develop YARA rules and behavioral signatures for malware detection.
• Maintain a malware repository and contribute to detection engineering improvements.

Qualifications

• Minimum 7 years of experience in Security Operations, Threat Intelligence, Malware Analysis, or Incident Response.
• Strong understanding of threat actor methodologies, APT groups, and cybercrime ecosystems.
• Hands-on experience with SIEM platforms (MS Sentinel), SOAR platforms, and threat intelligence platforms.
• Proficiency with malware analysis tools (Ghidra, IDA Pro, Cuckoo, etc.) and packet analysis tools (Wireshark, tcpdump).
• Experience with Defender EDR, Darktrace NDR, and Tenable vulnerability management platforms.
• Strong scripting skills (Python, PowerShell, Bash) for automation and enrichment.
• Knowledge of STIX/TAXII, YARA, OpenIOC, and intelligence sharing standards.
• Experience building detection use cases and threat-hunting methodologies.
• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Professional certifications such as CEH, CISSP, CISA, etc.
• Experience in large-scale enterprise, military, or government security operations environments.
• Strong analytical and investigative skills with the ability to synthesize complex data into actionable insights.
• Experience integrating threat intelligence into SOC workflows and detection pipelines.

Our Benefits And Perks

• Competitive compensation packages and comprehensive medical insurance to support you and your family.
• Wellbeing-focused initiatives and resources, designed to enhance your personal and professional life.
• Access to exclusive discount programs, offering savings across various lifestyle and leisure experiences across the UAE.

What Makes A Great Fit