Lead Elastic SIEM & Threat Detection Engineer

CPX; Abu Dhabi; On-site; AED 223,000 - 234,000; Full time

Benefits offered by this job

Elastic Security Certifications (ELC)

Job summary

CPX is seeking a Senior Elastic Security & Detection Engineer to enhance enterprise security monitoring using the Elastic Stack. You will build detections, dashboards, and data pipelines, and collaborate with SOC for threat hunting and incident response.

The role emphasizes Detection Engineering, Threat Hunting, and Security Content Development with a focus on MITRE ATT&CK alignment and scalable security monitoring.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity, or related field.
• 5–8 years of experience in cyber security, SIEM, or detection engineering.
• Strong hands-on experience with Elastic Stack components and SIEM operations.
• Experience developing detection content and threat hunting.
• Knowledge of MITRE ATT&CK, kill chain concepts, and detection engineering best practices.

Responsibilities

• Administer and optimize Elastic Stack infrastructure and Elasticsearch clusters.
• Design data ingestion pipelines using Logstash, Beats, and Elastic Agent.
• Develop detection rules, dashboards, and correlation logic.
• Partner with SOC for threat hunting and incident investigations.
• Create and maintain security dashboards, runbooks, and standards.

Skills

Elastic Stack

Elasticsearch

Kibana

Logstash

Beats

Elastic Agent

Elastic Security (SIEM)

Detection Engineering

Threat Hunting

SIEM Operations

Security Content Development

MITRE ATT&CK

Threat Intelligence

Incident Investigation

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Splunk

Enterprise SIEM

Job description

CPX is seeking a Senior Elastic Security & Detection Engineer to enhance enterprise security monitoring using the Elastic Stack. You will build detections, dashboards, and data pipelines, and collaborate with SOC for threat hunting and incident response.

The role emphasizes Detection Engineering, Threat Hunting, and Security Content Development with a focus on MITRE ATT&CK alignment and scalable security monitoring.