Senior SOC Engineer (SIEM)

About the role

The Senior SOC Engineer will lead the management of Splunk SIEM and UEBA services within CPX Security's Security Operations Center in Abu Dhabi. You will be responsible for onboarding new log sources, optimizing telemetry, and ensuring the platform remains performant and up‑to‑date.

Key responsibilities

• Manage Splunk SIEM services and implement scalable solutions following best practices.
• Define data ingestion strategies, parsing logic, and correlation rules.
• Onboard and integrate new log sources, monitor critical logs, and resolve issues promptly.
• Optimize telemetry for improved data collection, correlation, and reporting.
• Collaborate with SOC and threat intelligence teams to develop detection use cases.
• Create dashboards, alerts, and reports for proactive threat monitoring.
• Perform system updates, version upgrades, and feature rollouts while ensuring CIM compliance.
• Evaluate, deploy, and maintain Splunk apps, add‑ons, and custom configurations.

Required profile

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 5 years of experience in SOC operations with strong Splunk SIEM management.
• Relevant certifications such as Splunk Certified Administrator, CISSP, GIAC (preferred), and cloud architect certifications.
• Excellent communication and documentation skills, with the ability to lead technical initiatives independently.

Required skills

• Splunk SIEM and UEBA
• Search Processing Language (SPL)
• Python, Bash, PowerShell scripting
• AWS Certified Solutions Architect
• Google Professional Cloud Architect
• Microsoft Certified Azure Solutions Architect Expert
• CISSP
• GIAC (preferred)