Information Security Specialist

Role overview

Responsibilities

• Monitor alerts and logs and follow up on security events with SOC and ICT teams.
• Track vulnerability scan results, coordinate remediation, and maintain status updates.
• Support incident response through information gathering, escalation, action documentation, and follow-up.
• Maintain and monitor endpoint, email, DLP, SIEM, vulnerability scanning, firewall, and access control solutions.
• Perform periodic access reviews and support identity and access management activities.
• Prepare security reports, dashboards, audit materials, and compliance evidence.
• Support implementation of security policies, standards, baselines, and procedures.
• Assist with awareness communications, phishing campaign follow-up, and secure-practice guidance.
• Maintain security registers, checklists, incident records, trackers, and compliance evidence.
• Coordinate security requirements with infrastructure, systems, network, application, and business teams.

Minimum requirements

• A bachelor’s degree in Computer Science, Information Security, or a related field.
• At least 2 years of practical experience in information security, cybersecurity operations, SOC support, vulnerability management, endpoint/email security, access control, or related ICT security functions.
• Good understanding of security principles, threats, risks, and enterprise controls.
• Working knowledge of SOC processes, security monitoring, log analysis, and incident escalation.

Required skills

• Familiarity with EDR, SIEM, DLP, endpoint protection, email security, firewalls, MFA, and IAM.
• Understanding of secure configuration, system hardening, patch management, and access control best practices.
• Knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, and data protection requirements.
• Ability to support incident response, prepare security reports and evidence, and coordinate with stakeholders.
• Strong analytical, troubleshooting, problem-solving, and risk assessment skills with attention to detail.

Preferred qualifications

• Associate-level security certification such as CompTIA Security+, Microsoft SC-900/SC-200, ISO 27001 Foundation, or equivalent practical cybersecurity training is preferred.
• UAE National status with a Family Book is listed as preferred.