More jobs:
Senior Security Operations Engineer; SIEM/SOAR
Job Description & How to Apply Below
Essential Requirements
- 5–10 years' experience in security operations, SIEM engineering or a related cyber security role.
- Proven hands‑on experience deploying and configuring IBM QRadar (DSM configuration, custom properties, rules, reference data, apps).
- Strong hands‑on experience with Microsoft Sentinel: workspace design, data connectors, analytics rules, workbooks and automation.
- Strong KQL skills, plus working knowledge of AQL.
- Practical experience building SOAR playbooks and security automation.
- Sound understanding of log sources, parsing, normalisation and data pipelines (Syslog, CEF, AMA, DCRs, APIs).
- Good knowledge of the MITRE ATT&CK framework and detection engineering principles.
- Working knowledge of Azure, Microsoft Defender XDR and Microsoft Entra .
- Scripting ability in Power Shell and/or Python.
- SIEM migration experience, particularly QRadar to Microsoft Sentinel.
- Banking or financial services experience, including familiarity with regulatory expectations for security monitoring (e.g., CBUAE, PCI DSS, SWIFT CSP).
- Experience in large, regulated or 24x7 SOC environments.
- Infrastructure‑as‑code experience for Sentinel deployment (ARM, Bicep, Terraform) and CI/CD for detection content.
- Experience integrating threat intelligence platforms and EDR tools.
- Microsoft Certified:
Security Operations Analyst Associate (SC-200) - IBM Certified QRadar SIEM Administrator / Deployment Professional
- Relevant industry certifications such as GIAC (GCIA, GCIH, GCDA), CISSP or equivalent
Position Requirements
10+ Years
work experience
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×