Senior Cyber Security Analyst – Dubai

• Security Monitoring and Incident Response
  • Monitor, triage and investigate alerts from XDR, SIEM, email security, identity and firewall tooling across CloudTech24 and customer environments.
  • Investigate security events to determine root cause, scope and business impact, mapping activity to MITRE ATT&CK where relevant.
  • Carry out incident response activities, including containment, eradication and recovery, in line with defined playbooks and SLAs.
  • Act as an escalation point for the SOC analyst team on complex alerts and incidents, providing guidance and quality assurance.
  • Proactively threat hunt using available telemetry and threat intelligence.
  • Maintain accurate and timely incident records in the incident management system and produce clear incident reports for customers and internal stakeholders.
  • Contribute to the improvement of detection rules, playbooks and SOC processes.

  Security Assessments and Audits

  • Conduct security assessments of customer Microsoft 365, Azure and Google Workspace environments against best practice and frameworks such as CIS.
  • Produce clear, prioritised findings and remediation recommendations, and present them to technical and non-technical audiences.
  • Work with customers to help achieve and maintain certifications such as Cyber Essentials and Cyber Essentials Plus.
  • Support internal audits and evidence gathering for CloudTech24’s ISO 27001 certified ISMS.
  • Respond to customer security questionnaires and due diligence requests where technical input is required.

  Continuous Security Posture Improvement

  • Work with internal teams to continuously improve the security posture of CloudTech24 and customers through automation and standardisation.
  • Support our IT Operations team with Vulnerability Management efforts by providing key knowledge on vulnerabilities and exploits, and prioritising remediation by risk.
  • Support the projects and engineering teams to ensure customer onboarding meets security standards.

  Cyber Security Subject Matter Expert

  • Provide subject matter expertise on Cyber Security to both customers and internal teams.
  • Input into digital transformation or technology change for customers and internal stakeholders.
  • Liaise with customers on security topics, addressing queries and providing assurance on security measures.
  • Share knowledge with internal teams on cyber security topics.
  • Act as a subject matter expert in our cyber tooling capabilities and drive improvements when new capabilities are available.

Qualifications

Cyber Security Expertise:

• 2+ years in a cyber security role, including hands-on security monitoring and incident response in a SOC, MSSP or similar environment.
• Understanding of cyber threats and their impact on small to medium businesses (25–300 users).
• Understanding of common attack techniques and frameworks such as MITRE ATT&CK
• Familiarity with security frameworks such as CIS, and ability to apply them practically.
• Understanding of vulnerabilities and how they are identified, assessed and remediated.
• Experience delivering security assessments or audits against CIS or Cyber Essentials is beneficial.

Technical Proficiency:

• Hands-on experience with EDR/XDR, SIEM, and cloud security tools.
• Knowledge of Microsoft 365 / Azure security controls; experience with Google Workspace security is desirable.
• Understanding of email threats and how to analyse phishing emails.
• Experience with vulnerability management and security posture management tooling is beneficial.
• Scripting or query experience (e.g. PowerShell, KQL or Python) is beneficial.
• Good understanding of computing and networking is important as this underpins Cyber Security.

Certifications (Preferred):

• • CompTIA CySA+
  • Microsoft SC-900
  • Microsoft SC-200 (Security Operations Analyst)
  • Self-paced courses/certs such as Blue Team Labs Level 1.

Desirable Attributes

• Communication Skills: Excellent verbal and written communication in British English, including report writing.
• Soft skills: Ability to convey technical problems into non-technical language is incredibly important for this role.
• Problem-Solving: Strong analytical skills to assess risks and implement effective solutions.
• Composure: Able to work calmly and methodically during live incidents.
• Strategic Thinking: Ability to align security initiatives with business objectives.
• Adaptability: Comfortable working in a fast-paced environment and managing multiple priorities.
• Continuous Learning: Passion for staying updated on emerging threats and technologies.

Core Values

• Commitment to integrity and excellence in delivering services for our clients.
• Accountability and personal responsibility in our work and conduct.
• Collaboration and inclusion to encourage team performance and achieve our shared goals.
• Continuous development through ongoing personal growth and an eagerness to learn.
• Curiosity, innovation and embracing change.