Senior SOC Engineer (Emirati)

About the role

A cybersecurity company in the UAE is hiring a Senior SOC Engineer. You will run the Splunk SIEM and Splunk UEBA services inside a live Security Operations Center, including onboarding new log sources, tuning telemetry and keeping the platform fast and reliable.

Key responsibilities

• Manage Splunk SIEM services in the SOC and deploy scalable solutions following best practice
• Define data ingestion strategy, parsing logic and correlation rules
• Onboard new log sources and quickly monitor and fix critical ones
• Optimize telemetry for better collection, correlation and reporting
• Work with SOC and threat intelligence teams to develop detection use cases
• Build dashboards, alerts and reports for proactive threat monitoring
• Run system updates, version upgrades and feature rollouts
• Maintain CIM compliance, field extractions and data normalization
• Evaluate and deploy Splunk apps and add-ons
• Document SIEM workflows, configurations and operating procedures
• Work with IT, DevOps and security teams to improve SOC efficiency

Required profile

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field
• 3 to 5 years in SOC operations, with significant hands-on Splunk SIEM management
• Clear written and verbal communication, and sound decisions under pressure

Required skills

• Strong SPL skills for complex queries, dashboards and reports
• Experience with Splunk UEBA and related tools such as Cribl
• Working knowledge of SOC workflows, the MITRE ATT&CK framework and threat detection
• Solid cloud and network knowledge for log source onboarding and troubleshooting
• Scripting in Python, Bash or PowerShell
• Certifications: Splunk Certified Administrator; preferred are AWS, Google or Azure architect certification, and CISSP or GIAC