Senior SOC Engineer; Emirati

We are hiring a Senior SOC Engineer for a cybersecurity company in the UAE.

You will run the Splunk SIEM and Splunk UEBA services inside a live Security Operations Center. That means onboarding new log sources, tuning telemetry, and keeping the platform fast and reliable.

• Manage Splunk SIEM services in the SOC and deploy scalable solutions that follow best practice
• Define data ingestion strategy, parsing logic and correlation rules
• Onboard new log sources, then monitor and fix critical ones quickly
• Optimize telemetry for better collection, correlation and reporting
• Work with SOC and threat intelligence teams to develop detection use cases
• Build dashboards, alerts and reports for proactive threat monitoring
• Run system updates, version upgrades and feature rollouts
• Maintain CIM compliance, field extractions and data normalization
• Evaluate and deploy Splunk apps and add-ons
• Document SIEM workflows, configurations and operating procedures
• Work with IT, Dev Ops and security teams to improve SOC efficiency

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field
• 3 to 5 years in SOC operations, with significant hands‑on Splunk SIEM management
• Strong SPL skills for complex queries, dashboards and reports
• Experience with Splunk UEBA and related tools such as Cribl
• Working knowledge of SOC workflows, the MITRE ATT&CK framework and threat detection
• Solid cloud and network knowledge for log source onboarding and troubleshooting
• Scripting skills in Python, Bash or Power Shell
• Clear written and verbal communication, and sound decisions under pressure

• Splunk Certified Administrator
• Preferred: AWS, Google or Azure architect certification, and CISSP or GIAC