Cyber Security Specialist; SOC​/Incident Response

Job Title:

Cyber Security Specialist (SOC / Incident Response)

Experience:

7–9 Years

Location:

India - Remote (UAE Business Hours)

Employment Type:

Full-Time

We are seeking a Cyber Security Specialist to support day‑to‑day cybersecurity operations for a large enterprise customer in the UAE. This role is operational and hands‑on, focusing on SIEM monitoring, incident triage/response, EDR operations, vulnerability management coordination, and maintaining compliance‑aligned security operations in line with ISO 27001, SOC2, PCI/DSS, etc.

• Monitor and analyze security events using SIEM, including alert triage, correlation validation, and escalation handling
• Execute incident response activities: triage, containment coordination, evidence capture, and support for root‑cause analysis
• Operate and manage EDR tooling: policy management, alert handling, containment actions, and endpoint investigation support
• Support vulnerability management execution: scanning coordination, triage, remediation tracking, and verification
• Perform basic threat hunting and proactive detection improvements based on observed patterns and recurring incidents
• Maintain incident response playbooks, operational SOPs, and case documentation with high‑quality reporting
• Support ISO 2700, SOC 2, PCI/DSS operational compliance through evidence collection, reporting, and control execution
• Coordinate with platform, network, and application teams to resolve security events within defined timelines and processes

• 7–8 years of experience in SOC / Cyber Security Operations / Incident Response
• Strong hands‑on experience with SIEM operations (alerts, use‑cases, dashboards, reporting)
• Strong working experience with EDR tools and endpoint investigation fundamentals
• Practical understanding of incident response lifecycle and operational documentation discipline
• Experience coordinating remediation with cross‑functional teams in hybrid/on‑prem environments
• Strong knowledge of ISO 27001, SOC 2, PCI/DSS operational control expectations (logging, access, incident handling, evidence)

• CompTIA Security+, CySA+, CEH
• CISSP or CISM

• PCIP (ISA) – PCI Professional (Internal Security Assessor)
• Qualified Security Assessor (QSA) (where applicable/available)

• GIAC certifications (GCIA, GCIH, GCED)

• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Associate
• Microsoft Azure Security Engineer Associate (AZ‑500)

• Telecom, Government or regulated sector experience in security operations
• Familiarity with structured detection frameworks (e.g., MITRE ATT&CK) and improved alert engineering
• Scripting/automation exposure for reporting and operational efficiency