Our Core Business Values
Arab Solutions believes that technology is at the forefront of empowering people and organisations throughout the world. Our core business values are, therefore, to discover opportunities for creating a transformation to use our knowledge and expertise in supporting positive change and to enable people in producing powerful new developments.

We deliver on time and in budget
 Using a consultative approach, our experts identify which areas of our clients business can benefit from our services. This transforms IT from overhead cost, albeit one that provides commodity services, into a strategic value-add for our clients business. Arab Solutions is committed to meeting our client’s needs as well as working within their budgetary parameters.

Arab Solutions

<div>
<h1>Job Description – Security Specialist (SOC Analyst)</h1>
<h3>Position Overview</h3>
The Security Specialist (SOC Analyst) is responsible for the administration, monitoring, and enforcement of the organization’s information security policies and practices. This role ensures that information assets remain protected in terms of confidentiality, integrity, and availability, while authorized users can readily access the information they need. The SOC Analyst will play a key role in incident detection, response, threat hunting, vulnerability management, and ensuring compliance with cybersecurity standards.

<h3>Key Responsibilities</h3>
<h4>1. Service Management &amp; Operations</h4>
<ul>
<li>
Draft, maintain, and enforce policies, standards, procedures, and documentation for security.
</li>
<li>
Monitor compliance with security operations procedures and investigate actual/potential security breaches.
</li>
<li>
Ensure timely and thorough investigations of incidents, implementing corrective measures.
</li>
<li>
Maintain accurate and complete records of security operations.
</li>
<li>
Plan and implement security changes required to maintain organizational defenses.
</li>
</ul>
<h4>2. Strategy &amp; Risk Management</h4>
<ul>
<li>
Conduct risk assessments, vulnerability assessments, and business impact analyses for applications and systems.
</li>
<li>
Provide expert advice on security strategies and recommend control improvements.
</li>
<li>
Investigate and report on major breaches, leveraging forensic tools and practices.
</li>
<li>
Contribute to the development of security standards and guidelines in line with organizational policies.
</li>
<li>
Ensure proportionate response to vulnerabilities and threats.
</li>
</ul>
<h4>3. Incident Detection &amp; Response</h4>
<ul>
<li>
Monitor security alerts and events using SIEM tools (Azure Sentinel, etc.).
</li>
<li>
Investigate and analyze incidents to determine root cause and impact.
</li>
<li>
Execute containment, eradication, and recovery measures.
</li>
<li>
Maintain and update incident response playbooks and procedures.
</li>
<li>
Coordinate with the National Cyber Security Agency in case of reportable incidents.
</li>
<li>
Conduct internal investigations and recommend corrective measures.
</li>
</ul>
<h4>4. Threat Hunting &amp; Vulnerability Management</h4>
<ul>
<li>
Perform threat hunting to proactively identify risks and vulnerabilities.
</li>
<li>
Conduct vulnerability scans and penetration tests (using Tenable, Burp Suite, etc.).
</li>
<li>
Tune and implement threat detection analytics and SOC infrastructure.
</li>
<li>
Develop custom signatures/rules for detection and prevention systems.
</li>
<li>
Script automation for security analysis and incident response (Python, PowerShell, Bash).
</li>
</ul>
<h4>5. Security Tools &amp; Technologies</h4>
<ul>
<li>
Manage and configure firewalls, IDS/IPS, and endpoint protection solutions.
</li>
<li>
Administer and optimize security monitoring platforms (e.g., Microsoft Defender, Microsoft Cloud Defender, Microsoft Purview, Insider Risk Management).
</li>
<li>
Support compliance with frameworks such as GDPR, HIPAA, NIA, Qatar 2022 CSF, ISO 27001.
</li>
<li>
Conduct cybersecurity drills and disaster recovery exercises.
</li>
<li>
Ensure compliance with data privacy and data protection requirements.
</li>
</ul>
<h4>6. Collaboration &amp; Reporting</h4>
<ul>
<li>
Work closely with IT teams to align with security best practices.
</li>
<li>
Provide timely and accurate reporting on incidents, risks, and trends to management.
</li>
<li>
Stay updated with emerging cybersecurity threats, vulnerabilities, and technologies.
</li>
<li>
Contribute to awareness and training initiatives.
</li>
</ul>

<h3>Key Skills &amp; Competencies</h3>
<ul>
<li>
Minimum 5–6 years’ experience in cybersecurity, preferably within a SOC environment.
</li>
<li>
Proven experience in incident response, threat hunting, and vulnerability management.
</li>
<li>
Strong knowledge of SIEM tools (Azure Sentinel mandatory).
</li>
<li>
Experience with endpoint protection and vulnerability scanners (Defender, Tenable, Burp Suite, etc.).
</li>
<li>
Understanding of network forensics, endpoint forensics, and threat intelligence.
</li>
<li>
Strong knowledge of networking protocols, firewalls, IDS/IPS.
</li>
<li>
Scripting skills in Python, PowerShell, or Bash.
</li>
<li>
Strong problem-solving, analytical, and communication skills.
</li>
<li>
Ability to work under pressure and handle multiple tasks effectively.
</li>
</ul>

<h3>Qualifications</h3>
<ul>
<li>
Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
</li>
<li>
Mandatory Certifications:
<ul>
<li>
Certified SOC Analyst (CSA)
</li>
<li>
Certified Ethical Hacker (CEH)
</li>
<li>
Microsoft Security Operations Analyst (SC-200)
</li>
</ul>
</li>
<li>
Preferred (Not Mandatory): CompTIA Security+, CISSP, GIAC GSEC, GCIH, or equivalent certifications.
</li>
</ul>
</div>