Information Security Analyst (UAE National) | Corporate Services | Group Tech & Dig Platforms - Al Futtaim Group

Overview Of The Role:

The Entry-Level Information Security Analyst is integral to supporting Cyber Defense activities. The role focuses on managing SIEM Administration, monitoring and investigating SOC events, and performing vulnerability assessments. The analyst is tasked with defending the organization against cyber threats through effective monitoring, analysis, incident management, and collaboration with relevant teams. Success in this role involves contributing to the development and improvement of security measures and response processes while maintaining compliance with security policies. The analyst will gain exposure to a variety of tasks and have the opportunity to enhance their skills in a dynamic team environment.

What You Will Do:

Qradar SIEM Administration

Administer and maintain QRadar appliances, ensuring software updates, patches, and upgrades are up to date.
Monitor and analyze security events and incidents detected by QRadar to ensure threat detection.
Perform regular health checks and optimization of QRadar system components for operational efficiency.
Troubleshoot and resolve issues related to QRadar functionality and performance.
Collaborate with IT security teams to develop and refine use cases and detection strategies.
Provide support to IT teams and stakeholders on QRadar-related matters.
Document QRadar configurations, processes, and procedures for knowledge management.

Security Operations and Incident Management

Monitor security alerts and events across various tools including SIEM, IDS/IPS, and endpoint security.
Investigate and analyze security incidents to determine root cause and impact, taking appropriate response actions.
Perform in-depth analysis to identify indicators of compromise, tactics, techniques, and procedures used.
Develop and execute containment, eradication, and recovery plans in coordination with incident response teams.
Document incident findings and actions taken in incident reports for accountability and compliance.
Collaborate with IT, network operations, and application teams to implement security controls.
Participate in security incident response exercises to enhance response processes and procedures.
Conduct vulnerabilities scanning and support remedial actions with the team.
Stay informed on emerging threats and technologies through research and training.

Process, Procedure, and Knowledge Management

Collaborate with SOC team members to update processes, procedures, and activity lists periodically.
Upgrade and maintain skills as needed to meet SOC analyst requirements.
Ensure timely vulnerabilities assessment and support closure.

Job Details