Senior Engineer – SOC (SIEM)

Role overview

Compensation and duration

• Salary is stated as AED 20,000–AED 21,0000 per month; the salary field separately lists AED 20,000–210,000 per month.
• The position is for one year and may be extended.

Education and experience

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• At least five years of SOC operations experience, with significant Splunk SIEM management experience.
• Prior technical experience in a SOC or similar cybersecurity environment.

Required and preferred skills

• Splunk Certified Administrator and mastery of SPL for complex queries, dashboards, and reports are listed as mandate requirements.
• Scripting skills in Python, Bash, and PowerShell; cloud architecture certification examples include AWS, Google Cloud, and Microsoft Azure.
• CISSP and GIAC certifications are preferred.
• The role calls for Splunk SIEM, UEBA, and related technology knowledge such as CRIBL; SOC workflows, MITRE ATT&CK, and threat-detection knowledge.
• Strong understanding of cloud and network technologies, problem-solving, communication, documentation, and independent technical leadership.

Responsibilities

• Manage SOC Splunk SIEM services and implement scalable solutions following best practices.
• Define data-ingestion strategies, parsing logic, and correlation rules; onboard and integrate log sources.
• Monitor critical log sources, troubleshoot issues, and optimize telemetry for collection, correlation, and reporting.
• Work with SOC and threat-intelligence teams on detection use cases; create monitoring dashboards, alerts, and reports.
• Perform updates, upgrades, and feature rollouts; ensure CIM compliance, field extractions, and data normalization.
• Maintain SIEM performance; evaluate and deploy Splunk apps and add-ons.
• Document workflows, configurations, and procedures; improve processes and collaborate with IT, DevOps, and security teams.