L3 Cybersecurity Consultant & SME - Network

Job Description: L3 Cybersecurity Consultant & SME - Network

Location

Dubai, UAE (Onsite)

Employment Type

Full-time

Job Summary

L3 Cybersecurity Consultant & SME

Role Overview

We are seeking an experienced L3 Cybersecurity Consultant & Subject Matter Expert (SME) to provide advanced technical leadership across Zero Trust, ZTNA (Zero Trust Network Access), Network Detection & Response (NDR), and Natural Language Processing (NLP) security capabilities. The role will own complex security architecture, troubleshooting, incident escalation, engineering, and continuous improvement initiatives across enterprise environments.

Key Responsibilities

Zero Trust & ZTNA

• Design, implement, and optimize Zero Trust security architectures aligned with enterprise security strategies.
• Act as the L3 SME for ZTNA solutions, including policy design, application access, identity/context-based controls, and segmentation.
• Integrate ZTNA with IAM, MFA, PAM, EDR/XDR, SIEM, cloud, and network security platforms.
• Troubleshoot complex authentication, authorization, connectivity, policy, and access-control issues.
• Develop and maintain Zero Trust standards, reference architectures, policies, and technical documentation.

Network Detection & Response (NDR)

• Provide L3 expertise for NDR platforms, network analytics, behavioral detection, and threat investigation.
• Analyze advanced network telemetry, anomalous behavior, command-and-control activity, lateral movement, and other indicators of compromise.
• Develop and tune detection rules, analytics, alerts, and response workflows.
• Integrate NDR with SIEM, SOAR, EDR/XDR, threat intelligence, and SOC processes.
• Lead root-cause analysis and resolution of complex network security incidents.

NLP & Security Analytics

• Apply NLP and AI/ML techniques to cybersecurity use cases such as threat intelligence analysis, alert enrichment, security-event classification, and investigation automation.
• Evaluate and integrate NLP-based security capabilities into SOC and security operations workflows.
• Develop approaches for extracting entities, indicators, relationships, and threat context from unstructured security data.
• Work with security engineering and data teams to improve detection, triage, and investigation efficiency.

L3 Operations & Incident Response

• Serve as the highest technical escalation point for complex cybersecurity incidents and service issues.
• Perform advanced troubleshooting, forensic analysis, root-cause analysis, and remediation.
• Lead major incident technical investigations and provide actionable recommendations to stakeholders.
• Identify recurring issues and drive permanent fixes, automation, and operational improvements.
• Mentor L1/L2 analysts and engineers and provide technical guidance during complex investigations.

Architecture & Consulting

• Provide cybersecurity consulting across on-premises, cloud, hybrid, and multi-cloud environments.
• Review security architectures and provide recommendations for improving resilience, visibility, and risk reduction.
• Participate in technology evaluations, proof-of-concepts, solution designs, and security assessments.
• Translate business and security requirements into scalable technical solutions.
• Ensure solutions align with applicable security frameworks, standards, and organizational policies.

Required Technical Skills

• Strong expertise in Zero Trust Architecture and ZTNA.
• Advanced knowledge of NDR, network security monitoring, IDS/IPS, DNS, TCP/IP, TLS, HTTP/S, and network protocols.
• Experience with IAM, MFA, PAM, SSO, RBAC/ABAC, and identity-centric security controls.
• Strong SIEM/SOAR and SOC operations experience.
• Knowledge of EDR/XDR and endpoint security technologies.
• Practical understanding of NLP, AI/ML, LLMs, and security analytics.
• Experience with cloud security across platforms such as AWS, Azure, or GCP.
• Strong scripting/automation capabilities using technologies such as Python, PowerShell, or APIs.
• Experience with threat intelligence, MITRE ATT&CK, incident response, and security operations.

Professional Qualifications

• 10+ years of cybersecurity experience, with significant L3 engineering or consulting experience.
• Demonstrated experience designing or operating enterprise-scale Zero Trust/ZTNA environments.
• Proven ability to investigate sophisticated network-based security incidents.
• Strong analytical, troubleshooting, architecture, and problem-solving skills.
• Excellent communication skills, with the ability to explain complex security concepts to both technical and executive audiences.
• Experience mentoring engineers and analysts and providing technical leadership.

Preferred Certifications

• CISSP
• CCSP
• GIAC certifications such as GCIH, GCIA, or GCED
• Vendor-specific ZTNA/NDR certifications
• Cloud security certifications such as AWS Security Specialty or Microsoft Azure Security Engineer
• Relevant AI/ML or data-security certifications