Information Security Specialist (Microsoft Sentinel & XDR)

About the role

Core42, a leader in AI‑powered cloud and digital infrastructure, is looking for an Information Security Specialist to design, implement and operate Microsoft Sentinel and related XDR solutions for large‑scale enterprise environments.

Key responsibilities

• Design and deploy Microsoft Sentinel architectures across hybrid and multi‑cloud environments, including Log Analytics workspace strategy and cost optimisation.
• Onboard Microsoft and third‑party telemetry via native connectors, Syslog, CEF, APIs and custom ingestion methods.
• Develop KQL analytics rules, hunting queries, workbooks and dashboards aligned with MITRE ATT&CK.
• Implement SOAR automation using Sentinel automation rules and Logic Apps/playbooks for incident response.
• Own day‑to‑day Sentinel administration, monitoring, health management and troubleshooting.

Required profile

• 7‑8 years of hands‑on cybersecurity experience, including SOC, SIEM, EDR/XDR/NDR and incident response.
• Proven ability to architect, implement and operate Microsoft Sentinel at enterprise scale.
• Advanced expertise in KQL, SOAR automation and Microsoft Defender suite.

Required skills

• Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud Apps.
• CrowdStrike Falcon EDR, Elastic EDR, Corelight NDR.
• Kusto Query Language (KQL), PowerShell, Python, shell scripting, REST APIs.
• Linux administration, Red Hat OpenShift, OpenStack, Kubernetes/container security.

What we offer

• Competitive salary package aligned with experience.
• Performance‑based yearly bonus.
• Discount cards (Esaad and Fazaa) and premium family health insurance.
• Access to top‑tier learning platforms for continuous development.