oracle
SIEM Management
malomatia
Doha, QAT
Full-time
Mid · 5+ years experience
Onsite
Discovered 2 weeks ago
awsazuregcppythonsplunk
Key Skills for This Role
awsazuregcppythonsplunk
Full Job Posting
Experience:
- Minimum 5 years of experience in Security Engineering, including at least 3 years of hands-on experience managing SIEM solutions.
- Educational Qualifications:
- Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.
- Proven experience in designing and implementing SIEM solutions.
- Hands-on experience integrating security tools such as AV, AAA, Firewalls, DLP, and IDS/IPS with SIEM platforms.
- Experience implementing SIEM monitoring across cloud environments, including: AWS: CloudTrail, GuardDuty, VPC Flow Logs Azure: Activity Logs, Entra ID Sign-in Logs, Microsoft Defender for Cloud GCP: Cloud Audit Logs, VPC Flow Logs OCI: Audit Logs, Cloud Guard
- AWS: CloudTrail, GuardDuty, VPC Flow Logs
- Azure: Activity Logs, Entra ID Sign-in Logs, Microsoft Defender for Cloud
- GCP: Cloud Audit Logs, VPC Flow Logs
- OCI: Audit Logs, Cloud Guard
- Strong hands-on experience with SIEM technologies such as Splunk, Microsoft Sentinel, and Google SecOps.
- Good understanding of Information Security regulations, frameworks, and requirements, with the ability to map security needs to appropriate SIEM solutions.
- Solid understanding of Information Security and Networking.
- Experience with scripting and query languages for SIEM data onboarding, such as Python, Regex, SPL, and KQL.
- Strong analytical, troubleshooting, and problem-solving skills, with a focus on identifying and addressing root causes.
- Excellent time management, organizational, and prioritization skills, with the ability to manage multiple stakeholders and competing priorities.
- Strong written and verbal communication skills, with the ability to explain complex technical concepts to non-technical stakeholders.
- Ability to work on-call, including nights and weekends, when required.
- Ability to work effectively in a high-demand, customer-focused environment and deliver quality results within agreed timelines.
- Regional experience and familiarity with the Middle East.
- Experience working within an MSSP or MDR environment.
- Experience deploying and administering multiple SIEM technologies.
- Relevant certifications in Splunk, Microsoft Sentinel, Google SecOps, or other SIEM technologies.
Required Skills:
- Proven experience in designing and implementing SIEM solutions.
- Hands-on experience integrating security tools such as AV, AAA, Firewalls, DLP, and IDS/IPS with SIEM platforms.
- Experience implementing SIEM monitoring across cloud environments, including:
- AWS: CloudTrail, GuardDuty, VPC Flow Logs
- Azure: Activity Logs, Entra ID Sign-in Logs, Microsoft Defender for Cloud
- GCP: Cloud Audit Logs, VPC Flow Logs
- OCI: Audit Logs, Cloud Guard
- Strong hands-on experience with SIEM technologies such as Splunk, Microsoft Sentinel, and Google SecOps.
- Good understanding of Information Security regulations, frameworks, and requirements, with the ability to map security needs to appropriate SIEM solutions.
- Solid understanding of Information Security and Networking.
- Experience with scripting and query languages for SIEM data onboarding, such as Python, Regex, SPL, and KQL.
- Strong analytical, troubleshooting, and problem-solving skills, with a focus on identifying and addressing root causes.
- Excellent time management, organizational, and prioritization skills, with the ability to manage multiple stakeholders and competing priorities.
- Strong written and verbal communication skills, with the ability to explain complex technical concepts to non-technical stakeholders.
- Ability to work on-call, including nights and weekends, when required.
- Ability to work effectively in a high-demand, customer-focused environment and deliver quality results within agreed timelines.
- Desirable:
- Regional experience and familiarity with the Middle East.
- Experience working within an MSSP or MDR environment.
- Experience deploying and administering multiple SIEM technologies.
- Relevant certifications in Splunk, Microsoft Sentinel, Google SecOps, or other SIEM technologies.
Responsibilities
- Designing, reviewing, implementing, testing, maintaining, and troubleshooting SIEM deployments and infrastructures.
- Responsible for managing arrangements of dependencies and pre-requisites for SIEM projects e.g., connectivity, storage, licenses, and other equipment).
- Responsible for implementing changes to the SIEM infrastructure (including patches, updates, and upgrades) and performing SIEM Health Checks; and for creating technically relevant detailed reports to track solution effectiveness and performance.
- Manage SIEM Appliance or Virtual Appliance (including OS and SIEM software).
- Configure backups, verify custom reports, manage log source groups, and validate log sources.
- Manage SIEM user accounts (create, delete, modify, etc.).
- Add /Remove log sources. Troubleshoot issues with log sources or systems with system owners and vendors, and report system defects and product enhancement / feature requests with vendors as needed.
- Be responsible for development of integrations, connectors, and parsers for new event sources
- Implementing security monitoring rules in a SIEM tooling, according to the business needs
- Assist with fully optimizing the SIEM system capabilities and identifying opportunities for automation to improve SIEM effectiveness and efficiency.
- Create rules and reports for compliance and audit requirements and create and manage Watch Lists for current threats.
- Create engineering and security documentation for internal and external needs including high level and low-level design of SIEM infrastructure, as-built documentation and documentation for custom connectors/parsers and integrations.
- Assist with designing and documenting work processes within the SOC.
- Responsible for mentoring and training of Junior SIEM Engineers.
- Perform other duties as assigned.
About malomatia
Information Technology3000 employeesFounded 2008
Qatar-based technology services provider driving digital transformation and innovation.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at malomatia
Executive Assistant
, QAT
SeniorFull-time
The employer is seeking an experienced Executive Assistant to provide strategic and administrative support to the Chief of SBU. The role manages communications, meetings, records, expenses, and follow-up on key deliverab
Discovered 6 days agoView →
Engineer – System
, QAT
SeniorFull-time
The employer is seeking a Senior Systems Engineer with 8+ years of experience to administer Linux and Windows systems and enterprise infrastructure in a 24/7 SOC Fusion Center environment. The role covers virtualization,
Discovered 6 days agoView →
Engineer - Information Security Operations
, QAT
JuniorFull-time
The employer is seeking an Information Security Operations Engineer to monitor security alerts, investigate incidents, and improve detection and response. The role includes managing security tools, applying threat intell
Discovered 6 days agoView →
Executive Assistant
Doha, QAT
Discovered 6 days agoFull-time
Executive Assistant
, QAT
Discovered 6 days agoFull-time
Engineer – System
, QAT
Discovered 6 days agoFull-time
Engineer - Information Security Operations
, QAT
Discovered 6 days agoFull-time
Engineer – System
Doha, QAT
Discovered 1 weeks agoFull-time
Consultant – Assurance & Validation, GPU Infrastructure
, QAT
Discovered 1 weeks ago
Data Migration Lead
Doha, QAT
Discovered 1 weeks ago
Camunda BPM Integration Support
Doha, QAT
Discovered 1 weeks ago