SOC Analyst – Digital Forensics & Incident Response

The Role

This position sits within a 24×7 SOC environment and focuses on advanced investigation of escalated security incidents. Day-to-day work spans digital forensics, malware triage, threat correlation across multiple security platforms, incident timeline reconstruction, containment support, and maintaining thorough, defensible documentation of all findings and evidence handling.

Skills & Experience

Candidates should bring five to seven years of SOC or DFIR experience, with strong knowledge of forensic artifacts on Windows and Linux, host triage, and malware analysis. Familiarity with tools such as CrowdStrike, FortiGate, AWS, Netskope, and Mimecast is expected. Scripting in PowerShell or Python is advantageous, as are certifications including GCFA, GCFE, GCIH, CHFI, or SC-200.

Who It Suits

This role suits an experienced DFIR professional who thrives in technically demanding, fast-paced environments and is comfortable owning complex investigations end to end. Someone with a methodical mindset, collaborative instincts, and a genuine interest in financial technology security will find this position both challenging and rewarding. Based in Dubai.