Cloud Security & SIEM Engineer (SOC)

About the role

We are looking for a Cloud Security & SIEM Engineer to join a Security Operations Centre in Dubai. The role focuses on securing multi‑cloud environments, integrating cloud telemetry with SIEM platforms, and automating security operations.

Key responsibilities

• Monitor and protect workloads across AWS, Azure and Google Cloud, applying shared‑responsibility security controls.
• Identify and remediate cloud misconfigurations, excessive permissions and insecure network exposure.
• Implement and review role‑based access controls, MFA and privileged‑account monitoring.
• Secure cloud networks (VPCs, subnets, security groups, firewalls) and support Zero‑Trust segmentation.
• Integrate cloud logs with SIEM platforms such as Securonix, Microsoft Sentinel, Splunk, IBM QRadar and Elastic SIEM.
• Develop detection rules, dashboards, alerts and investigation queries in the SIEM.
• Configure and analyse cloud‑native logging services (CloudWatch, CloudTrail, Azure Monitor, etc.).
• Investigate security incidents, determine impact and support containment, remediation and post‑incident review.
• Automate security workflows using Python, PowerShell, Bash, Terraform, CloudFormation, Azure Bicep and serverless services (AWS Lambda, EventBridge, Azure Logic Apps).

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering or related field.
• 3–8 years of experience in cloud security, SIEM engineering or SOC environments.
• Hands‑on experience with at least one major cloud provider (AWS, Azure or GCP).
• Experience with enterprise SIEM platforms and cloud‑log integration.

Required skills

• AWS, Microsoft Azure, Google Cloud Platform
• SIEM platforms: Securonix, Microsoft Sentinel, Splunk, IBM QRadar, Elastic SIEM
• Python, PowerShell, Bash
• Terraform, AWS CloudFormation, Azure Bicep
• AWS Lambda, Amazon EventBridge, Azure Logic Apps
• Kubernetes, AKS, EKS, ECS
• Identity & Access Management, RBAC, MFA, privileged‑access monitoring