Cloud Security & SIEM Engineer (SOC)

ITHR 360° CONSULTING FZE; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

ITHR 360° CONSULTING FZE is seeking a Cloud Security & SIEM Engineer to join its Dubai SOC. The role focuses on securing cloud environments, integrating telemetry with SIEM, and automating security operations across AWS, Azure, or GCP.

The candidate will implement IAM, network security, and logging strategies, work with major SIEM platforms, and drive incident detection and response in a fast-paced onsite SOC. Immediate joiners preferred.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 3–8 years in cybersecurity, cloud security, SIEM engineering, or SOC environments.
• Hands-on with one major cloud provider: AWS, Azure, or GCP.
• Experience with IAM, RBAC, MFA, and privileged-access monitoring.
• Experience with cloud network security concepts (VPCs, firewalls, segmentation).

Responsibilities

• Monitor workloads across AWS, Azure, and GCP and enforce cloud security controls.
• Integrate cloud telemetry with SIEM platforms via connectors, APIs, or agents.
• Configure and maintain cloud-native logging services and dashboards.
• Develop and tune SIEM detection rules, correlations, and response playbooks.
• Onboard and normalise cloud log sources for analytics and investigations.
• Support incident detection, triage, containment, and post-incident reviews.
• Automate security tasks using Python/PowerShell/Bash and IaC tools.
• Ensure logging retention and audit readiness in cloud environments.

Skills

Cloud security

SIEM engineering

SOC operations

Cloud platforms AWS/Azure/GCP

Python/PowerShell/Bash

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Securonix

Microsoft Sentinel

Splunk

IBM QRadar

Elastic SIEM

Job description

ITHR 360° CONSULTING FZE is seeking a Cloud Security & SIEM Engineer to join its Dubai SOC. The role focuses on securing cloud environments, integrating telemetry with SIEM, and automating security operations across AWS, Azure, or GCP.

The candidate will implement IAM, network security, and logging strategies, work with major SIEM platforms, and drive incident detection and response in a fast-paced onsite SOC. Immediate joiners preferred.