Data Platform Engineer -Security Analytics & SOC Platforms

We have an urgent requirement for Data Platform Engineer -Security Analytics & SOC Platforms

with

experience in banking domain (preferred) is required for our banking clients in Abu Dhabi ,UAE

Design and maintain Real-time security event ingestion pipelines from SIEM/SOAR platforms, threat intelligence correlation engines for SOC operations, data lake architecture for cyber forensics and audit trails.--

Candidates should have strong experience with cloud-based data platforms, data engineering, and working with high-volume, business

‑

critical data.---

Candidate should well versed with builds reliable data pipelines, supports analytics and reporting needs for security teams, and ensures data is well-structured for investigations and audits.---

We are seeking a Cyber Data Engineer to design and maintain real-time data platforms that power our Security Operations Center, threat intelligence, and cyber forensics capabilities.

This role builds and operates large-scale security event ingestion pipelines from SIEM/SOAR, develops threat intelligence correlation engines, and maintains a cyber data lake for forensics and audit trails.

You will ensure security and operational data is reliable, well-structured, and available in near real time for investigations, analytics, and regulatory audits.

Design, build, and operate real-time security event ingestion pipelines integrating with SIEM/SOAR platforms including Splunk, Sentinel, QRadar, or Cortex XSOAR.

Ensure low-latency, high-throughput data flow with reliability and data quality guarantees.

Develop and tune correlation engines that enrich, normalize, and correlate threat intel with live security telemetry for SOC use cases.

Enable advanced detection logic, threat hunting, and automated enrichment workflows.

Design and maintain a centralized cyber data lake on cloud platforms for security logs, alerts, netflow, endpoint telemetry, and forensics artifacts.

Implement data modeling, partitioning, retention, and access controls to support investigations and audit trails.

Partner with SOC, Threat Intel, and Forensics teams to support analytics and reporting needs.

Build curated datasets, views, and APIs that enable advanced security analytics, dashboards, and ad-hoc investigations.

Ensure data platforms meet SLAs for availability, freshness, and accuracy.

Implement data lineage, quality checks, and metadata management.

Support regulatory and internal audit requirements with complete, tamper-evident audit trails.

Manage cloud-native data infrastructure on AWS, Azure, or GCP.

Optimize cost, performance, and scalability of streaming and batch workloads.

Automate infrastructure-as-code and CI/CD for data pipelines.

8+ years in data engineering with 5+ years building security or high-volume operational data platforms.

with SIEM/SOAR data integration essential.

Strong skills in Python, SQL, and distributed data processing using Spark, Flink, Kafka, or Kinesis.

with dbt, Airflow, or similar orchestration.

Hands-on with AWS, Azure, or GCP data services: S3/ADLS/GCS, Glue/Databricks/Synapse, Athena/BigQuery, Redshift/Snowflake.

Understanding of SOC workflows, security telemetry, MITRE ATT&CK, and threat intel formats like STIX/TAXII.

with SIEM query languages: SPL, KQL, or AQL.

Proven ability to design data lakes/lakehouses for large-scale, business-critical data with proper security, retention, and access patterns.

:Knowledge of data privacy, logging standards, and audit requirements in regulated industries, preferably banking/financial services.Certifications (Anyone Must): Microsoft Certified: Azure Data Engineer Associate, Databricks Certified Data Engineer Professional

security,cyber,data