Security Specialist (Soc Analyst)

Arab Solutions

Draft, maintain, and enforce policies, standards, procedures, and documentation for security.

Monitor compliance with security operations procedures and investigate actual/potential security breaches.

Ensure timely and thorough investigations of incidents, implementing corrective measures.

Maintain accurate and complete records of security operations.

Plan and implement security changes required to maintain organizational defenses.

Conduct risk assessments, vulnerability assessments, and business impact analyses for applications and systems.

Provide expert advice on security strategies and recommend control improvements.

Investigate and report on major breaches, leveraging forensic tools and practices.

Contribute to the development of security standards and guidelines in line with organizational policies.

Ensure proportionate response to vulnerabilities and threats.

Monitor security alerts and events using SIEM tools (Azure Sentinel, etc.).

Investigate and analyze incidents to determine root cause and impact.

Execute containment, eradication, and recovery measures.

Maintain and update incident response playbooks and procedures.

Coordinate with the National Cyber Security Agency in case of reportable incidents.

Conduct internal investigations and recommend corrective measures.

Perform threat hunting to proactively identify risks and vulnerabilities.

Conduct vulnerability scans and penetration tests (using Tenable, Burp Suite, etc.).

Tune and implement threat detection analytics and SOC infrastructure.

Develop custom signatures/rules for detection and prevention systems.

Script automation for security analysis and incident response (Python, PowerShell, Bash).

Manage and configure firewalls, IDS/IPS, and endpoint protection solutions.

Administer and optimize security monitoring platforms (e.g., Microsoft Defender, Microsoft Cloud Defender, Microsoft Purview, Insider Risk Management).

Support compliance with frameworks such as GDPR, HIPAA, NIA, Qatar 2022 CSF, ISO 27001.

Conduct cybersecurity drills and disaster recovery exercises.

Ensure compliance with data privacy and data protection requirements.

Work closely with IT teams to align with security best practices.

Provide timely and accurate reporting on incidents, risks, and trends to management.

Stay updated with emerging cybersecurity threats, vulnerabilities, and technologies.

Contribute to awareness and training initiatives.