Summary
IFZA (International Free Zone Authority) is hiring a SOC Analyst in Dubai to monitor security alerts, investigate incidents, and support threat detection and response. The role includes triaging alerts, analyzing indicators of compromise, documenting investigations, escalating serious incidents, and contributing to security awareness training. Applicants should have a bachelor’s degree in engineering, computer science, or a related field, with 5–7 years of SOC operations experience and at least 3 years of hands-on SOC, blue team, or security engineering experience. Experience with Microsoft Sentinel and Defender, cloud security, scripting, and threat-hunting methods is required; the posting also lists several relevant certifications.
The posting
As published on ifza.com. Pulled from the employer's site and shown as they wrote it.
The SOC The soc analyst will be responsible for protecting IFZA’s information systems identifying, assessing and mitigating security risks. This role involves monitoring, analyzing,and responding to security incidents, implementing security measures, and ensuring compliance with industry standards and reglations. The ideal candidate is proactive, detail-oriented, and possesses strong technical and analytical skills.
Responsibilities:
Security Monitoring
- Monitor SIEM dashboards (e.g.,
Microsoft Sentinel) and security alerts in real time.
- Track and analyze events from
security tools (eg . Microsoft Defender)
- Identify suspicious activities,
anomalies, or policy violations.
Incident Triage & Response
- Perform initial investigation
and classification of alerts (false positive vs true positive).
- Collect and review logs, event
details, reputation information, and indicators of compromise.
- Escalate confirmed or
high-severity incidents to L2/L3 analysts with proper documentation.
- Initiate predefined response
actions (isolating devices, forcing password resets, blocking IPs).
Threat Analysis
- Check IOC hits against threat
intelligence sources.
- Analyze phishing emails,
malware infections,
malicious URLs, attachments, credential-harvesting attempts and unauthorized access.
- Identify trends across alerts
to support early-stage threat detection.
Documentation & Reporting
- Create detailed incident
tickets and investigation notes.
- Conduct root cause analysis and document incident reports with remediation recommendations.
- Maintain proper incident
timelines and updates in the ticketing system.
- Generate reports for repeated
or trending issues.
Collaboration
- Work closely with Security Team
and internal IT teams.
- Communicate effectively with
users to validate suspicious activities or login attempts.
- Follow established SOPs and
contribute to process improvements.
Security Awareness and Training
- Conduct security awareness training for employees to promote best practices (e.g., password management, phishing prevention).
- Create and distribute educational materials on emerging cyber threats.
Threat Intelligence and Research:
- Stay updated on the latest cyber threats, vulnerabilities, and attack vectors.
- Analyze threat intelligence reports and apply findings to enhance organizational security posture.
Requirements
- Bachelor’s in engineering, Computer Science, or related field.
- 5-7 years of experience in SOC
operations.
- Minimum 3+ years hands-on experience in SOC, blue team, or security engineering roles.
- Proven expertise with Microsoft Sentinel, Microsoft Defender, Incident management
and compromised recovery.
- Solid grasp of TCP/IP, Windows/Linux internals, AWS/Azure security primitives.
- Scripting for automation (Python, Bash, or PowerShell).
- Familiarity with MITRE ATTACK mapping and threat-hunting methodology.
- CompTIA Security+, Microsoft
SC-200, CEH, CCNA or CCNP - Security.
Benefits
- International team (over 50 nationalities)
- 24 annual leave days
- Annual flight home
- Life insurance plan
- Medical insurance plan (with the option to upgrade at your own cost)
- Invitations to participate in various company functions, staff events, and department team building events
- Opportunities to learn, develop and grow with the organization
- Being part of a motivated team and Moving-Forward-Company-Culture