Security Consultant - SIEM & SOAR

About the role

Help AG, the cybersecurity arm of Etisalat, is looking for an experienced Security Consultant focused on post-sales professional services for enterprise cybersecurity solutions. The role covers implementation, integration, configuration, optimization, troubleshooting and support, with a strong technical focus on Splunk SIEM, Palo Alto Cortex XSOAR, Fortinet FortiSOAR, DevSecOps and security automation. It may also involve pre-sales activities such as workshops, POCs, demonstrations, SoW preparation and effort estimation.

Key responsibilities

• Act as a Zscaler Subject Matter Expert for Help AG customers and lead large, complex ZIA and ZPA deployments.
• Architect, design, implement and optimize Zscaler solutions, validate architecture and identify technical gaps or risks.
• Lead technical workshops, migrations, rollouts and rollback plans, and mentor other engineers.
• Troubleshoot complex Zscaler, network, application and identity issues and handle support tickets and escalations.
• Support presales teams with solution design, POCs and Statements of Work, and escalate project risks and dependencies.
• Maintain technical documentation, HLDs, LLDs, runbooks and SOPs, and work with Zscaler Professional Services and Support.

Required profile

• Bachelor's degree in Information Security, IT, Computer Science or equivalent experience.
• Minimum 5 years of experience in cybersecurity, information security, system integration or related fields.
• Minimum 3 years of hands-on experience in SIEM, SOAR, security automation or related security operations technologies.
• Proven experience delivering SIEM and SOAR solutions in complex enterprise environments; experience with a cybersecurity services provider, systems integrator, MSS provider or IT consulting firm is highly preferred.
• Excellent written and spoken English; Arabic is an advantage.

Required skills

• Strong hands-on experience with Splunk SIEM, Palo Alto Cortex XSOAR and Fortinet FortiSOAR, including playbook development and automation.
• Splunk Enterprise and Splunk Enterprise Security, including SPL, correlation searches and dashboards.
• DevSecOps, Python, PowerShell, Bash, Git, Azure DevOps and CI/CD pipelines.
• Networking (TCP/IP, BGP, OSPF, DNS, NAT, VPN, firewalls, SSL/TLS), cloud (Azure, AWS, OCI) and identity (Active Directory, Entra ID, SAML, OAuth, MFA).
• Ability to write HLDs, LLDs, test plans, SOPs and technical diagrams.

What we offer

• Health insurance with a leading global provider.
• Career progression through challenging projects and learning and development opportunities.
• Annual flight tickets and employee engagement and wellness campaigns.
• Flexible or hybrid working environment and an inclusive, open-door culture.