{bc}
indeed

Senior Security Operations Engineer (SIEM / SOAR)

DICETEK LLC
Abu Dhabi, UAE
Contract
Senior
Onsite
Discovered 5 days ago
IBM QRadarMicrosoft SentinelKQLAQLSOAR playbooks and security automationLog parsing, normalization, and data pipelines

Full Job Posting

Essential experience

  • 5–10 years’ experience in security operations, SIEM engineering, or a related cybersecurity role.
  • Hands-on IBM QRadar deployment and configuration, including DSMs, custom properties, rules, reference data, and apps.
  • Hands-on Microsoft Sentinel experience across workspace design, connectors, analytics rules, workbooks, and automation.
  • Strong KQL skills, working knowledge of AQL, and practical experience building SOAR playbooks and security automation.

Technical knowledge

  • Understand log sources, parsing, normalization, and data pipelines, including Syslog, CEF, AMA, DCRs, and APIs.
  • Know the MITRE ATT&CK framework and detection engineering principles.
  • Have working knowledge of Azure, Microsoft Defender XDR, and Microsoft Entra ID.
  • Have scripting ability in PowerShell and/or Python.

Highly desirable experience

  • SIEM migration experience is highly desirable, particularly migration from QRadar to Microsoft Sentinel.
  • Banking or financial services experience and familiarity with monitoring expectations such as CBUAE, PCI DSS, or SWIFT CSP are highly desirable.
  • Experience in large, regulated, or 24x7 SOC environments is highly desirable.
  • Infrastructure-as-code for Sentinel deployment, including ARM, Bicep, or Terraform, and CI/CD for detection content are highly desirable.
  • Experience integrating threat intelligence platforms and EDR tools is highly desirable.

Preferred certifications

  • Preferred credentials include Microsoft Certified: Security Operations Analyst Associate (SC-200), IBM Certified QRadar SIEM Administrator or Deployment Professional, and relevant GIAC, CISSP, or equivalent certifications.

Responsibilities

  • Deploy and configure IBM QRadar, including DSM configuration, custom properties, rules, reference data, and apps.
  • Design Microsoft Sentinel workspaces, configure data connectors and analytics rules, build workbooks, and implement automation.
  • Build SOAR playbooks and security automation.
  • Develop and apply detection engineering using log sources and normalized data pipelines.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at DICETEK LLC