Senior Cyber Security Consultant

About the Role

iConnect IT Business Solutions is a UAE-based MSSP and professional-services partner serving enterprise, banking and government clients across the UAE and GCC.

This role owns the technical side of our security business end to end: shaping and winning opportunities, proving solutions in client environments, and operating the SOC platform our managed services run on. You will also lead and develop the security engineering team, setting the technical standards the rest of the team works to.

Presales and solution architecture

• Lead technical discovery with security, infrastructure and compliance stakeholders, and translate findings into solution architectures and bills of materials.
• Own technical responses to RFPs and RFIs for enterprise and public-sector tenders, including compliance mapping.
• Run competitive evaluations across vendors, positioning on architecture and operating model rather than feature lists.

Proof of concept and delivery

• Plan and run POCs in live client environments, with success criteria agreed in writing up front.
• Lead technical delivery across endpoint (EDR/XDR), privileged access, data classification and DLP, email security and authentication, vulnerability management and offensive validation.
• Hand engagements to operations with documented design decisions.

SOC and automation

• Own the SOC platform: collection, processing and storage architecture, retention, custom parsers, correlation rules and multi-tenant MSSP onboarding.
• Build and maintain SOAR playbooks (phishing triage, enrichment, containment).
• Tune detections to keep alert volume actionable.

Compliance

• Map controls to NESA, CBUAE, DESC, ADGM, DIFC and UAE PDPL, plus PCI DSS and ISO 27001, and produce audit evidence.

Team and enablement

• Set technical standards and methodology for the security team, and mentor engineers.
• Deliver training and workshops for client and partner teams.

• 6+ years in cyber security, with at least 3 in the UAE or GCC market.
• Hands-on SIEM/SOC engineering experience (Microsoft Sentinel, Splunk, QRadar or equivalent) and SOAR playbook experience.
• Demonstrated experience running POCs and technical evaluations through to a client decision.
• Experience writing RFP/RFI responses and solution designs for regulated or government clients.
• Working knowledge of UAE regulatory frameworks.
• Hands-on depth in at least three of: EDR/XDR, PAM, email security/DMARC, DLP and data classification, vulnerability management, offensive validation.
• Team leadership or mentoring experience.
• Bachelor's degree in a relevant field.
• A current certification such as OSCP, CEH, or CompTIA CySA+/Pentest+ (or equivalent).

Preferred

• OSCP or a comparable offensive-security certification.
• Microsoft security stack (Entra ID, Intune, Purview, Sentinel, Defender).
• SOC/SIEM and SOAR platform vendor certifications.
• Penetration testing or secure-code-review background.

What success looks like in the first 12 months

• A smooth takeover of the SOC platform and active engagements within the first 90 days.
• POC-to-deployment conversion at or above team target.
• Strong RFP/RFI quality and win rate.
• Measurable detection-quality and false-positive improvement on managed tenants.
• Documented, repeatable handover from presales to delivery.