Security Engineer / SOC Lead
BlackStone eIT
- Abu Dhabi, United Arab Emirates
- Lead/Staff
- 5+ years
- Posted
Skills
Required
- cybersecurity operations / SOC / incident response / security engineering
- security monitoring
- vulnerability management
- SIEM
- incident handling
- security operations
- firewall management
- incident handling & response
- Splunk
- QRadar
- Sentinel
- threat analysis
Preferred
- cybersecurity
- CEH
- GCIH
- monitoring
- firewall security controls, policies
- SIEM integration
- use-case tuning
Responsibilities
- BlackStone eIT · Abu Dhabi, United Arab Emirates · Full-time · Posted 2026-11-10
- Act as the onsite operational security focal point, coordinating security monitoring, incident response, technical remediation, and reporting with Blackstone's shared SOC.
- Manage and maintain enterprise firewall security controls, policies, and configurations.
- Lead and support vulnerability management activities, including identification, assessment, tracking, and remediation of security vulnerabilities.
- Coordinate security monitoring, alert triage, and escalation with the shared SOC and technical teams.
- Lead operational response to confirmed security incidents according to approved procedures.
- Handle security operations activities and ensure effective execution of security processes.
- Collect and preserve technical evidence, maintaining incident records and timelines.
- Coordinate containment, remediation, recovery, and post-incident reviews with stakeholders.
- Support security logging, SIEM integration, use-case tuning, and monitoring coverage assessments.
- Track technical security risks and remediation dependencies across infrastructure and applications.
- Provide operational security reporting and escalate policy/risk decisions to authorized functions.
Requirements
- Indian national currently based in the UAE, preferably Abu Dhabi
- 5+ years of cybersecurity operations, SOC, incident response, or security engineering experience.
- Hands-on experience in firewall management, vulnerability management, and incident handling & response.
- Practical experience with SIEM platforms such as Splunk, QRadar, Sentinel, or equivalent.
- Strong knowledge of security monitoring, incident handling, threat analysis, and security operations.
- Experience coordinating with SOC teams and driving remediation activities across infrastructure and application environments.
Preferred
- Security+, CEH, GCIA, GCIH, or equivalent cybersecurity certification preferred.
