Senior Engineer – SOC (SIEM)

About the role

The Senior SOC Engineer will lead the management of Splunk SIEM and UEBA services within a fast‑paced Security Operations Center. The role focuses on onboarding log sources, optimizing telemetry, and ensuring high‑performance SIEM operations.

Key responsibilities

• Manage and scale Splunk‑based SIEM solutions, including data ingestion, parsing, and correlation rule creation.
• Onboard new log sources, monitor critical feeds, and troubleshoot integration issues.
• Develop detection use cases with SOC and threat intelligence teams, and create dashboards, alerts, and reports.
• Perform system updates, version upgrades, and feature rollouts while maintaining CIM compliance and data normalization.
• Evaluate, deploy, and document Splunk apps, add‑ons, and workflow procedures.

Required profile

• Minimum 5 years of SOC experience with strong Splunk SIEM management.
• Hands‑on expertise in Splunk UEBA, CRIBL, and familiarity with MITRE ATT&CK.
• Ability to work independently, lead technical initiatives, and communicate effectively.

Required skills

• Splunk Certified Administrator and mastery of SPL.
• Scripting: Python, Bash, PowerShell.
• Cloud certifications: AWS Solutions Architect, Google Cloud Architect, or Azure Solutions Architect.
• Security certifications: CISSP, GIAC (preferred).