Summary
CyberGate is hiring a Level 1 SOC Analyst in Dubai. The role involves monitoring SIEM alerts, investigating suspicious activity, performing initial incident triage, escalating critical incidents, and managing incident tickets and security reports. Candidates should have 2 to 4 years of SOC experience and familiarity with tools such as Splunk Enterprise and IBM QRadar, along with basic networking and security knowledge. The position supports MSS clients in a 24x7 SOC environment and requires rotational shifts.
The posting
As published on cybergate.tech. Pulled from the employer's site and shown as they wrote it.
Role:
Security Operations Center (SOC) Analyst – Level 1
Key Skills:
- SIEM Monitoring using:
- Splunk Enterprise
- IBM QRadar
- MSS (Managed Security Services) operations
- Security event monitoring and alert analysis
- Incident triage and escalation
- Log analysis and correlation
- Basic networking knowledge (TCP/IP, DNS, HTTP, VPN)
- Understanding of cyber threats and attack techniques
- Ticketing tools (ServiceNow/JIRA/Remedy)
- Basic knowledge of:
- Windows/Linux logs
- Firewall alerts
- IDS/IPS
- Endpoint security
Responsibilities:
- Monitor security alerts and events in SIEM tools
- Analyze and investigate suspicious activities
- Perform initial incident triage and classification
- Escalate critical incidents to L2/L3 teams
- Create and manage incident tickets
- Follow SOC playbooks and SOPs
- Generate daily/weekly security reports
- Support MSS clients in 24x7 SOC environment
- Maintain SLA compliance
Preferred Certifications:
- CompTIA Security+
- CEH
- Splunk Fundamentals
- IBM QRadar Fundamentals
- SC-200 (Microsoft Security Operations Analyst)
Shift Requirement:
- Rotational shifts / 24x7 SOC environment