Job Description
The SOC L1 Analyst (SIEM Integration Focus) supports real‑time security monitoring, log ingestion validation, and first‑level incident triage. The role blends SOC operations with SIEM onboarding and data quality assurance to strengthen enterprise threat visibility.
This position is exclusively open to Emirati Nationals, supporting national workforce development and compliance requirements.
Monitor SIEM dashboards, alerts, and correlation rules for potential security incidents.
Validate log ingestion from firewalls, IDS/IPS, EDR/XDR, servers, cloud platforms, IAM, and network devices.
Support onboarding of new log sources using Syslog, API, agents, connectors, and event hubs.
Assist in maintaining parsers, field extractions, normalization rules, and basic detection use cases.
Perform first‑level triage: classify alerts, escalate incidents, and document findings.
Troubleshoot ingestion issues such as missing fields, timestamp errors, duplicate logs, and parsing failures.
Coordinate with SOC L2/L3, security architects, and infrastructure teams for issue resolution.
Ensure critical telemetry is available for investigations and threat monitoring.
Maintain documentation for integration procedures, onboarding checklists, and runbooks.
Understanding of SIEM architecture, log flow, and event correlation.
Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, Elastic Security.
Familiarity with security log types: Windows Event Logs, Linux syslog, firewall/proxy logs, AD logs, cloud audit logs, EDR telemetry.
Basic hands‑on experience with log parsing, regex, JSON/XML formats, syslog protocols, and REST APIs.
Foundational knowledge of MITRE ATT&CK, incident response, detection engineering, and threat monitoring.
Understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, authentication protocols, and IAM concepts.
Ability to analyze ingestion issues and support correlation troubleshooting.
Exposure to cloud SIEM integrations (AWS, Azure, GCP).
Familiarity with SOAR workflows.
Understanding of compliance logging requirements (ISO 27001, PCI‑DSS, HIPAA, GDPR).
Experience creating basic detections or use cases.
Exposure to threat intelligence feed integration.
Awareness of SIEM retention, storage, and licensing considerations.
Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.
1–4 years of experience in SOC, SIEM operations, or log management.
Relevant certifications (advantage):
Microsoft Sentinel
Splunk Core
QRadar
Security+ / CySA+
Opportunity to grow from SOC L1 to L2/L3 roles.
Hands‑on exposure to enterprise SIEM integrations and detection engineering.
Supportive environment for Emirati talent development in cybersecurity.
Requirements
Enrolled in or recent graduate of a degree/diploma in Computer Science, Information Technology, or related field Fundamental understanding of operating systems, networking, and cloud-based services Strong problem-solving mindset, with a passion for helping others Excellent written and verbal communication skills in English Self-motivated, organized, and able to thrive in a fully remote environment Basic knowledge of ticketing systems (e.g., Zendesk, Freshdesk) is a plus
SOC L1 Analyst – SIEM Integration (Emirati National Only) • Dubai, DU, ae
VAM Systems is currently looking for.Administering and troubleshooting IS tools and applications.Managing Windows servers firewalls and endpoint security.Handling SOC alerts and incident response.C... أظهر المزيد
Are you passionate about data strategy and driving business impact across diverse markets Were looking for a.Middle East Africa and South Asia.Analyze large datasets to identify savings vendor perf... أظهر المزيد
H&B Consulting Analyst (Emirati Nationals Only).Are you an ambitious and detail-oriented professional looking to advance your career in consulting Join our dynamic team as an.Open exclusively t... أظهر المزيد
Assist in the development of software solutions by writing testing and debugging code.Collaborate with team members to meet project goals taking direction from senior team members.Learn and grow wi... أظهر المزيد
Systems Assurance Analyst II (Transport & Rail).Created by the integration of longstanding organizations dating back to 1911 AtkinsRalis is a worldclass engineering services and nuclear company... أظهر المزيد
Managed Security Services Security Operations Centre.UAE / Middle East (On-site / Shift-based).Managed Security Services SOC.Years (SOC / Security Operations).ITHR Technologies Consulting LLC is ... أظهر المزيد
Worked on predictive analytics initiatives using Informatica to integrate cleanse transform and prepare data from multiple enterprise sources.Developed ETL workflows and data pipelines to support p... أظهر المزيد
Contribute to software development projects by writing testing and debugging code with an emphasis on complex and critical with team members to meet project requirements actively participating in ... أظهر المزيد
As a Principal Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security Security Operations Cyber Risk Management and... أظهر المزيد
Corporate Intelligence Analyst South Asia Coverage.Lead complex open-source and human source-led investigations focused on South Asia (including pre-transaction integrity due diligence disputes sup... أظهر المزيد
The ENTERTAINER is a leader in the Lifestyle industry providing our members with exclusive access to 2-for-1 vouchers for dining delivery attractions shopping and travel across the GCC and Singapor... أظهر المزيد
Travel obsessed Big tech fan Hey youre in good company.If you want to be part of the industry that makes the world go round then look no further.Travelport is the brains behind lots of your travel ... أظهر المزيد
Xaasios Enterprise Private Cloud.This is a highly specialized role where you ll be managing configuring and optimizing the Xaasio SIEM environment to support security operations across enterprise... أظهر المزيد
We are currently looking for SOC Analyst for our UAE operations with the following Skill set and terms & conditions.Should have experience in tools such as Qrader MS Sentinel IBM Guardium and E... أظهر المزيد
Splunk Core Certified User / Power User.CrowdStrike Certified Falcon Responder (CFR).SOC Leadership & Operations:.Lead and manage a 24/7 SOC team (onshore and offshore) ensuring efficient monit... أظهر المزيد
Banking SOA Delivery methodology SOA Center of excellence and implementation of SOA best of Banking Service standards such as ISO8583 IFX Open Bank Project ISO20022 and SWIFT.Service design exper... أظهر المزيد
We are seeking a highly skilled CNS/ATM Project Manager to join our team in Dubai United Arab Emirates.As a key member of our organization you will be responsible for overseeing and managing comple... أظهر المزيد
We are currently looking SOC Engineer for our UAE operations with the following terms & conditions.Bachelors degree in computer science Network/ Cyber Security or related information technology... أظهر المزيد
Act as the primary onsite liaison between the customer and GBMs Managed Detection and Response (MDR) services.Administer and manage Security Information and Event Management (SIEM) systems includin... أظهر المزيد
TekWissen is a global workforce management provider throughout India and many other countries in the world.The below job opportunity is one of our clients which has been a one-stop solution for pr... أظهر المزيد
