Senior SOC Engineer (SIEM)

The Senior SOC Engineer (SIEM) at the United Arab Emirates is responsible for leading technical operations and SIEM architecture within the Security Operations Centre. This position requires managing SIEM tools such as Splunk, Sentinel, LogRhythm, and FortiSIEM, overseeing log collection layers, and ensuring system health. The SOC Lead Engineer will provide technical leadership, mentor junior engineers, and participate in pre-sales activities for SIEM licenses.

Responsibilities

• Lead the technical operations and management of SIEM tools including Splunk, Sentinel, LogRhythm, Qradar, and FortiSIEM.
• Oversee the maintenance and functionality of the log collection layer, focusing on tools like CRIBL.
• Ensure the health and functionality of SIEM systems through regular checks and maintenance activities.
• Optimize SIEM telemetry to ensure efficient and accurate data collection, correlation, and reporting.
• Provide guidance and mentorship to SOC Engineers in managing issues related to SIEM services and log management.
• Collaborate to develop SIEM architecture strategies and implement initiatives.
• Assist in continuous process improvements to increase SOC efficiency and effectiveness.

Requirements

• Extensive knowledge and hands-on experience with SIEM tools such as Splunk, Sentinel, LogRhythm, and FortiSIEM.
• A minimum of 10 years of experience in SIEM and SOC operations, with significant experience in SIEM management and architecture.
• Certifications such as CISSP, CISM, Splunk Certified Architect or similar are required.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Proven technical leadership skills in a complex, fast-paced environment.
• Demonstrable experience in estimating SIEM licenses and providing technical expertise.

Location
MBZ City, Abu Dhabi, United Arab Emirates