Cybersecurity Analyst (Dubai)

Role overview

Responsibilities

• Conduct cybersecurity assessments, health checks, security reviews, audits, and gap assessments against industry standards, regulatory requirements, and best practices.
• Review client network, cloud, endpoint, identity, email, and infrastructure security controls; identify ways to improve security posture.
• Perform vulnerability assessments, validate remediation, and develop prioritized remediation roadmaps and practical recommendations.
• Analyze alerts, phishing, malware incidents, endpoint detections, and emerging threats; support incident investigations and response, including root-cause analysis.
• Review Microsoft 365, Azure, AWS, and other cloud security configurations.
• Prepare technical reports, executive summaries, risk registers, and audit findings; coordinate with client and internal teams to close findings.
• Provide cybersecurity advisory services and tailored guidance; support client security maturity and transformation initiatives.
• Support compliance work involving ISO 27001, NIST CSF, CIS Controls, MAS TRM, SFC, DFSA, GDPR, PDPA, and other applicable standards.
• Stay informed about cybersecurity threats, technologies, industry trends, and regulatory developments.

Required qualifications

• Prior experience in cybersecurity assessments, security operations, incident response, vulnerability management, security audits, or cybersecurity consulting.
• Strong knowledge of cybersecurity principles, defensive security controls, and industry best practices.
• Experience reviewing security controls across cloud, network, endpoint, and identity platforms.
• Familiarity with Microsoft 365, Azure, Google Cloud, AWS, endpoint and email security, SIEM, and EDR technologies.
• Experience analyzing cybersecurity incidents, alerts, phishing attacks, and threat intelligence.
• Strong analytical, troubleshooting, and problem-solving skills; self-directed, detail-oriented, and able to work in a fast-paced agile environment.
• Professional client handling and teamwork; willing to work outside standard business hours when necessary.
• Strong written and verbal English communication skills; Cantonese, Mandarin, or Arabic is an advantage.

Preferred qualifications

• Security+, CISM, CRISC, CEH, CISSP, CREST, SC-200, SC-100, or similar certifications are preferred.
• Cloud security, cybersecurity audit, risk assessment, and compliance review experience is preferred.
• Knowledge of Sentinel, Defender XDR, CrowdStrike, Splunk, QRadar, Rapid7, or similar monitoring platforms is preferred.
• Knowledge of Python or PowerShell and familiarity with regulatory requirements and compliance standards are preferred.

Workplace

• The role is based in the employer’s DIFC office in Dubai.

About Bare Cove Technology