Senior Cybersecurity Specialist

We are hiring for our leading client in Abu Dhabi and are looking for an experienced Senior Cybersecurity Specialist with 10+ years of hands-on cybersecurity experience.The ideal candidate will have strong practical expertise across the Microsoft Security ecosystem, Microsoft Sentinel, Wazuh, SIEM/SOC operations, threat detection, Active Directory security, network and web security, security automation, and ISO 27001.This is a highly hands-on, engineering-oriented role focused on designing, operating, optimizing, and automating enterprise security controls.

Key Responsibilities

Lead cybersecurity operations, threat detection, incident response, threat hunting, and security posture improvement initiatives.Manage and optimize Microsoft Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Office 365, and related Microsoft security solutions.Administer and enhance Microsoft Sentinel, including analytics rules, KQL queries, workbooks, playbooks, threat hunting, and incident workflows.Deploy, manage, tune, and monitor Wazuh for endpoint monitoring, log analysis, compliance, and threat detection.Develop detection logic and response processes aligned with the MITRE ATT&CK framework.Conduct security investigations, root cause analysis, threat hunting, and post-incident reporting.Assess and improve web application security, including OWASP Top 10, WAF configuration, secure configurations, and vulnerability remediation.Strengthen Active Directory security, including identity protection, privilege management, hardening, monitoring, and attack-path reduction.Review and improve network security controls, including firewalls, IDS/IPS, segmentation, VPN, secure remote access, and network monitoring.Develop security automation using PowerShell, Python, KQL, APIs, Logic Apps, n8n, and other workflow/automation platforms.Automate alert triage, enrichment, notification, ticketing, containment, and security reporting processes.Support ISO 27001 / ISMS activities, including risk assessments, control reviews, internal audits, evidence collection, gap assessments, corrective actions, and continuous improvement.Collaborate with IT, infrastructure, cloud, network, and application teams to embed security into enterprise systems and processes.Support vulnerability management, security assessments, remediation tracking, documentation, runbooks, and security playbooks.Required Skills & Experience:10+ years of professional cybersecurity experience.Strong hands-on experience with the Microsoft Defender security suite.Strong experience with Microsoft Sentinel covering SIEM, SOAR, threat hunting, analytics, and incident response.Hands-on experience with Wazuh deployment, configuration, tuning, monitoring, and reporting.Strong practical understanding of MITRE ATT&CK and detection engineering.Strong knowledge of web application security, OWASP Top 10, WAF, and vulnerability remediation.Strong knowledge of Active Directory security, identity attacks, privilege escalation, lateral movement, hardening, and monitoring.Strong knowledge of network security, including firewalls, segmentation, VPN, IDS/IPS, secure protocols, and traffic analysis.Working knowledge of ISO 27001, ISMS, risk management, security controls, and audit requirements.Experience supporting ISO 27001 audits, control implementation, gap assessments, evidence collection, and remediation.Practical experience with security automation and scripting using PowerShell, Python, KQL, Logic Apps, n8n, APIs, or similar technologies.Strong understanding of enterprise security architecture, security operations, incident investigation, and risk management.Preferred Skills:Experience with n8n and security workflow automation.Experience with AI-assisted / AI-driven development approaches for security tools and automation.Microsoft Azure security experience.Advanced KQL development, detection rules, alert logic, dashboards, and workbooks.Experience integrating SIEM/SOAR platforms with ticketing systems, messaging platforms, threat intelligence, and endpoint security solutions.Knowledge of security frameworks, baselines, compliance requirements, and control maturity assessments.Ability to map technical controls and evidence to ISO 27001 requirements.Strong communication, documentation, analytical, and stakeholder management skills.Preferred Certifications:CISSPCISMISO 27001 Lead Auditor / Lead ImplementerCEHSANS GIAC certificationsMicrosoft SC-200Microsoft AZ-500Microsoft SC-100