{bc}
indeed

Senior Security Operations Engineer (SIEM / SOAR)

DICETEK LLC
Abu Dhabi, UAE
Contract
Onsite
Discovered 6 days ago
IBM QRadarMicrosoft SentinelKQLAQLSOAR playbooksSecurity automation

Full Job Posting

Essential Requirements

  • 5-10 years' experience in security operations, SIEM engineering or a related cyber security role.
  • Proven hands-on experience deploying and configuring IBM QRadar (DSM configuration, custom properties, rules, reference data, apps).
  • Strong hands-on experience with Microsoft Sentinel: workspace design, data connectors, analytics rules, workbooks and automation.
  • Strong KQL skills, plus working knowledge of AQL.
  • Practical experience building SOAR playbooks and security automation.
  • Sound understanding of log sources, parsing, normalisation and data pipelines (Syslog, CEF, AMA, DCRs, APIs).
  • Good knowledge of the MITRE ATT&CK framework and detection engineering principles.
  • Working knowledge of Azure, Microsoft Defender XDR and Microsoft Entra ID.
  • Scripting ability in PowerShell and/or Python.

Highly Desirable

  • SIEM migration experience, particularly QRadar to Microsoft Sentinel.
  • Banking or financial services experience, including familiarity with regulatory expectations for security monitoring (e.g., CBUAE, PCI DSS, SWIFT CSP).
  • Experience in large, regulated or 24x7 SOC environments.
  • Infrastructure-as-code experience for Sentinel deployment (ARM, Bicep, Terraform) and CI/CD for detection content.
  • Experience integrating threat intelligence platforms and EDR tools.

Certifications (Preferred)

  • Microsoft Certified: Security Operations Analyst Associate (SC-200).
  • IBM Certified QRadar SIEM Administrator / Deployment Professional.
  • Relevant industry certifications such as GIAC (GCIA, GCIH, GCDA), CISSP or equivalent.

Responsibilities

  • Deploy and configure IBM QRadar including DSM configuration, custom properties, rules, reference data, and apps
  • Design and operate Microsoft Sentinel workspaces, data connectors, analytics rules, workbooks, and automation
  • Build SOAR playbooks and security automation
  • Engineer detection content aligned with MITRE ATT&CK principles
  • Manage log sources, parsing, normalisation, and data pipelines
  • Integrate threat intelligence platforms and EDR tools

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at DICETEK LLC