About the Role
Join a leading security practice and play a key role in strengthening clients’ cyber defense capabilities. As a Cybersecurity Service Delivery Manager, you will lead the delivery of SIEM logging and security monitoring enablement across complex enterprise environments. You will combine strong technical knowledge of SIEM and log management with delivery leadership, ensuring security-relevant data is onboarded, normalized, and validated to effectively support threat detection and monitoring use cases. You will collaborate closely with security, application, infrastructure, and engineering teams to translate detection and monitoring requirements into actionable logging requirements.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
What You’ll Do
SIEM & Logging Delivery
- Lead end-to-end delivery of log-source assessment, onboarding and validation into enterprise SIEM platforms, with Splunk preferred.
- Define and govern logging requirements aligned with security monitoring, detection, and investigation use cases.
- Oversee log onboarding activities including source identification, ingestion, parsing, field extraction, normalization, and validation.
- Assess log sources for quality, completeness, consistency, and security value, identifying gaps and recommending remediation.
- Ensure required security events and fields are captured accurately and made available to monitoring and detection teams.
Technical & Delivery Leadership
- Provide technical direction and troubleshooting support for complex log ingestion, parsing, mapping, and data-quality issues.
- Apply strong knowledge of common logging formats and protocols, including syslog, JSON, Windows Event Logs, and application logs.
- Drive consistent approaches to data normalization and standardization across diverse technology environments.
- Understand how telemetry supports detection engineering and collaborate with detection teams to ensure logs meet defined use-case requirements.
- Coordinate dependencies across application, infrastructure, platform, and cybersecurity teams to enable required logging.
- Lead delivery through batch-based, wave-based, or phased onboarding approaches, balancing delivery priorities, dependencies, and technical readiness.
Service Management & Governance
- Own delivery planning, progress tracking, risks, issues, dependencies, and stakeholder reporting for assigned logging initiatives.
- Establish clear quality criteria and ensure onboarding outputs meet agreed technical and operational requirements.
- Produce high-quality assessments, onboarding documentation, status reporting, and management-level updates.
- Facilitate working sessions with technical teams and stakeholders to resolve blockers and maintain delivery momentum.
- Identify opportunities to improve onboarding processes, logging standards, operational efficiency, and monitoring coverage.
- Act as a trusted point of coordination between cybersecurity teams and technology stakeholders.
What You’ll Need
- Strong hands-on understanding of SIEM technologies, preferably Splunk.
- Demonstrated experience with log onboarding, ingestion pipelines, parsing, and field extraction.
- Strong understanding of security logging across operating systems, applications, network devices, and security technologies.
- Knowledge of common log formats and protocols such as syslog, JSON, and Windows events.
- Experience assessing and improving log quality, completeness, and consistency.
- Experience defining logging requirements against security monitoring and detection use cases.
- Working knowledge of detection engineering and the role telemetry plays in effective security detections.
- Understanding of security-data normalization, standardization, and mapping practices.
- Strong analytical and troubleshooting capabilities, particularly for ingestion and data-quality issues.
- Experience coordinating with application, infrastructure, platform, and security teams.
- Demonstrated experience managing structured, phased, or batch-based technology delivery.
- Strong documentation, reporting, and presentation capabilities.
- Excellent stakeholder management and communication skills, with the ability to translate technical issues into clear business and delivery impacts.
Bonus Points If You Have
- Experience delivering SIEM or security-monitoring capabilities in large-scale enterprise environments.
- Experience with Splunk administration, SPL, data models, or Common Information Model concepts.
- Exposure to SOC operations, threat detection, incident investigation, or threat hunting.
- Experience working with cloud and hybrid environments.
- Familiarity with MITRE ATT&CK and security monitoring frameworks.
- Relevant cybersecurity, SIEM, Splunk, or service-management certifications.
- Experience operating within a Managed Security Services environment.
