Security Engineer NDR Core42 On-site Fast Track

About Us

Core
42, a leader in AI-powered cloud and digital infrastructure, is driving transformative technology solutions globally. Leveraging advanced resources and partnerships, Core
42 empowers clients to harness sovereign AI infrastructure, especially in sectors with stringent regulatory needs. With a mission to redefine digital transformation, we combine sovereign capabilities with scalable, high-performance compute infrastructure, positioning itself at the forefront of AI innovation in the Middle East and beyond.

Security Engineer - NDR & Cloudflare, Core
42 - Abu Dhabi, UAE. We are seeking an experienced Security Engineer responsible for the design, implementation, administration and continuous improvement of the organisation's Corelight Network Detection & Response (NDR) and Cloudflare platforms. The role will focus on enhancing network visibility, threat detection, Zero Trust security, DDoS protection, WAF, web application security, DNS security and incident response capabilities across enterprise and cloud environments.

The candidate will work closely with Platform Engineering, SOC, Incident Response, Network Engineering, Infrastructure, Cloud and Security Architecture teams to strengthen the organisation's cyber defence posture.

• Design, deploy, manage and maintain Corelight sensors across enterprise, cloud and data centre environments
• Develop and optimise network detection use cases leveraging Zeek, Suricata, Corelight Smart PCAP, threat intelligence integrations and YARA
• Ensure complete east-west and north-south traffic visibility
• Establish network baselines and anomaly detection capabilities
• Integrate Corelight with SIEM and SOC platforms
• Monitor health, performance and capacity of NDR infrastructure

• Develop and tune custom Corelight detections
• Create behavioural and anomaly-based detection use cases
• Conduct proactive threat hunting using network telemetry, DNS, HTTP and TLS logs, SMB activity and authentication traffic
• Implement MITRE ATT&CK aligned detection coverage
• Reduce false positives while improving detection fidelity

• Design and manage web application security services including WAF, bot management, rate limiting, API security and custom security rules
• Manage DNS security including Cloudflare DNS, DNSSEC and secure DNS policies
• Deliver Zero Trust security using Cloudflare Access, Secure Web Gateway, browser isolation, identity integrations and device trust controls
• Manage network protection services including DDoS protection, Magic Transit, Magic Firewall and Magic WAN

• Investigate network-based attacks and anomalies
• Support malware investigations and forensic activities
• Perform packet analysis and network forensics
• Lead triage and containment activities during security incidents
• Develop and maintain incident response playbooks

• Enhance detection coverage across cloud, network, data centre and internet edge
• Develop KPIs and security metrics
• Identify security gaps and recommend improvements

• Integrate Corelight and Cloudflare with IDP, SIEM, Cribl, EDR, ITSM, threat intelligence platforms, SOAR platforms, LDAP, AI, ML and CMDB
• Develop automation scripts using Python, Power Shell and REST APIs

• Ensure solutions align with NIST 800-53, NIST CSF, ISO 27001, CIS Controls, SOC 2, UAE Information Assurance Standards, internal policies and procedures, and regulatory requirements
• Support audits and compliance assessments

• Bachelor's degree in Cyber Security, Computer Science,…