Cyber Security Specialist (SOC / Incident Response)
full-time•India
About this role
Job Title: Cyber Security Specialist (SOC / Incident Response)
Experience: 7–9 Years
Location: India - Remote (UAE Business Hours)
Employment Type: Full-Time
Job Summary
We are seeking a Cyber Security Specialist to support day-to-day cybersecurity operations for a large enterprise customer in the UAE. This role is operational and hands-on, focusing on SIEM monitoring, incident triage/response, EDR operations, vulnerability management coordination, and maintaining compliance-aligned security operations in line with ISO 27001, SOC2, PCI/DSS, etc.
Key Responsibilities
- Monitor and analyze security events using SIEM, including alert triage, correlation validation, and escalation handling
- Execute incident response activities: triage, containment coordination, evidence capture, and support for root-cause analysis
- Operate and manage EDR tooling: policy management, alert handling, containment actions, and endpoint investigation support
- Support vulnerability management execution: scanning coordination, triage, remediation tracking, and verification
- Perform basic threat hunting and proactive detection improvements based on observed patterns and recurring incidents
- Maintain incident response playbooks, operational SOPs, and case documentation with high-quality reporting
- Support ISO 2700, SOC 2, PCI/DSS operational compliance through evidence collection, reporting, and control execution
- Coordinate with platform, network, and application teams to resolve security events within defined timelines and processes
Required Skills & Qualifications
- 7–8 years of experience in SOC / Cyber Security Operations / Incident Response
- Strong hands-on experience with SIEM operations (alerts, use-cases, dashboards, reporting)
- Strong working experience with EDR tools and endpoint investigation fundamentals
- Practical understanding of incident response lifecycle and operational documentation discipline
- Experience coordinating remediation with cross-functional teams in hybrid/on-prem environments
- Strong knowledge of ISO 27001, SOC 2, PCI/DSS operational control expectations (logging, access, incident handling, evidence)
Preferred Certifications
- CompTIA Security+, CySA+, CEH
- CISSP or CISM
PCI DSS / Payment Security:
- PCIP (ISA) – PCI Professional (Internal Security Assessor)
- Qualified Security Assessor (QSA) (where applicable/available)
Incident / Detection (strong alignment with PCI monitoring requirements):
- GIAC certifications (GCIA, GCIH, GCED)
Cloud Security:
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect – Associate
- Microsoft Azure Security Engineer Associate (AZ-500)
Good to Have
- Telecom, Government or regulated sector experience in security operations
- Familiarity with structured detection frameworks (e.g., MITRE ATT&CK) and improved alert engineering
- Scripting/automation exposure for reporting and operational efficiency
What you'll do
- The Cyber Security Specialist will monitor and analyze security events, execute incident response activities, and manage EDR tooling. They will also support vulnerability management and maintain compliance with security standards.
About NorthBay Solutions
NorthBay is AWS Premier Consulting Partner and also partnered with AI21 Labs, VMware, CloudRail and SAP in support of our Customers’ AWS cloud journeys. NorthBay helps companies transform their business by unlocking the value of their data in the cloud so they can gain agility and speed in their decision making and innovation.
Our specialities include:
- Generative AI
- Managed Service Provider
- Cloud Migration and Modernization Services
- Cloud Application Development
- Data Lake/Data Warehouse
- Machine Learning & AI
- DevOps Enablement
- Staff Augmentation
- Performance & Optimization.
Ready to join NorthBay Solutions?
Take the next step in your career journey
Frequently Asked Questions
What does a Cyber Security Specialist (SOC / Incident Response) do at NorthBay Solutions?
As a Cyber Security Specialist (SOC / Incident Response) at NorthBay Solutions, you will: the Cyber Security Specialist will monitor and analyze security events, execute incident response activities, and manage EDR tooling. They will also support vulnerability management and maintain compliance with security standards..
Is the Cyber Security Specialist (SOC / Incident Response) position at NorthBay Solutions remote?
The Cyber Security Specialist (SOC / Incident Response) position at NorthBay Solutions is based in India, India. Contact the company through Clera for specific work arrangement details.
How do I apply for the Cyber Security Specialist (SOC / Incident Response) position at NorthBay Solutions?
You can apply for the Cyber Security Specialist (SOC / Incident Response) position at NorthBay Solutionsdirectly through Clera. Click the "Apply Now" button above to start your application. Clera's AI-powered platform will help match your profile with this opportunity and guide you through the application process.