Senior SIEM Engineer - QRadar and Microsoft Sentinel

Senior SIEM Engineer - QRadar and Microsoft Sentinel Job Snapshot:
Role:
Senior SIEM Engineer - QRadar and Microsoft Sentinel

- Location:

Abu Dhabi, United Arab Emirates
- Industry: Banking
- Function:
Computer-Network Security

- Experience:

5-10 years in security operations, SIEM engineering or a related cybersecurity role
- Job Type: Full Time
- Work Arrangement:
On-site
- Gender: No Preference
- Candidate Nationality:
Not specified
- Salary:
Not disclosed.

Position Overview:

Dicetek LLC is seeking an experienced SIEM Engineer with strong hands-on expertise in IBM QRadar and Microsoft Sentinel for a full-time, on-site opportunity in Abu Dhabi, United Arab Emirates. The role requires practical experience deploying, configuring and supporting enterprise Security Information and Event Management (SIEM) platforms. The successful candidate will work with security log ingestion, detection engineering, analytics rules, automation playbooks and security monitoring integrations.

• Deploy and configure IBM QRadar SIEM environments.
• Configure Device Support Modules (DSMs) for security log ingestion and parsing.
• Develop and maintain custom properties for extracting relevant security event information.
• Configure correlation rules to support threat detection.
• Manage reference data used in security monitoring and correlation.
• Configure and support QRadar applications.
• Investigate log parsing, normalisation and event processing issues.
• Troubleshoot QRadar configuration and detection-related problems.

• Design and configure Microsoft Sentinel work spaces.
• Implement and maintain security data connectors.
• Develop and manage analytics rules for threat detection.
• Create and maintain Sentinel workbooks for security monitoring and reporting.
• Configure automation capabilities and associated security workflows.
• Support integration with relevant Microsoft security services.
• Investigate data ingestion, detection and automation issues.
• Maintain reliable Sentinel configurations and security monitoring capabilities.

• Develop and maintain security detection logic using KQL.
• Apply AQL when investigating or developing relevant QRadar queries.
• Use MITRE ATT&CK techniques to inform detection engineering activities.
• Analyse security events and identify opportunities to improve threat detection.
• Review detection rules for accuracy and operational effectiveness.
• Investigate false positives and detection gaps.
• Support consistent detection coverage across integrated log sources.
• Maintain documentation for detection rules and associated security use cases.

• Configure and troubleshoot security log ingestion from enterprise systems.
• Work with Syslog and Common Event Format (CEF) data sources.
• Configure relevant Azure Monitor Agent (AMA) integrations.
• Apply Data Collection Rules (DCRs) for supported Microsoft monitoring requirements.
• Integrate security events through APIs where appropriate.
• Investigate log parsing and normalisation issues.
• Validate that ingested security data supports intended monitoring and detection requirements.
• Troubleshoot data pipeline failures affecting SIEM visibility.

• Build and maintain Security Orchestration, Automation and Response (SOAR) playbooks.
• Develop security automation workflows supporting monitoring and response activities.
• Integrate automation with relevant security tools and services.
• Use Power Shell or Python to support scripting and automation requirements.
• Troubleshoot automation failures and integration issues.
• Validate playbook behaviour and operational effectiveness.

• Work with Microsoft Azure security capabilities.
• Supp…