Lead SOC Engineer — Splunk SIEM/SOAR Expert

Showcify, Inc.; Abu Dhabi; On-site; AED 300,000 - 420,000; Full time

Job summary

Showcify, Inc. seeks a Lead Engineer – SOC (SIEM & SOAR) to deliver Splunk SIEM/SOAR management within the SOC, onboarding new log sources, and optimizing telemetry. You will ensure system updates, resolve issues, and enhance automation and orchestration through SOAR playbooks.

The role requires extensive Splunk experience, CIM, and proficiency with multiple SOAR platforms, including Phantom, FortiSOAR, and Cortex XSOAR, with collaboration across internal and external teams.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity, or related field.
• 8+ years in SOC operations with strong Splunk management experience.
• Certifications in Splunk, CISSP/GIAC or cloud architecture are a plus.

Responsibilities

• Deliver Splunk SIEM/SOAR management services within the SOC environment.
• Onboard new log sources and optimize telemetry in Splunk/SOAR.
• Maintain and govern SOC critical log sources and integrations.
• Design SOAR playbooks and connect with ticketing and threat intel systems.
• Mentor junior SOC engineers and provide regular reports on Splunk services.

Skills

Splunk SIEM

SOAR

CIM/field extractions

Python scripting

SPL mastery

Cloud & network knowledge

Incident response

Data normalization

Automation/orchestration

Collaboration with stakeholders

Splunk Phantom / SOAR platforms

Forti SOAR

Cortex XSOAR

CRIBL

MITRE ATT&CK framework

Education

Bachelor’s degree in computer science / IT / cybersecurity

Tools

Splunk SIEM

Splunk SOAR (Phantom)

Forti SOAR

Cortex XSOAR

CRIBL

AWS/Azure/Google Cloud architectures

Job description

Showcify, Inc. seeks a Lead Engineer – SOC (SIEM & SOAR) to deliver Splunk SIEM/SOAR management within the SOC, onboarding new log sources, and optimizing telemetry. You will ensure system updates, resolve issues, and enhance automation and orchestration through SOAR playbooks.

The role requires extensive Splunk experience, CIM, and proficiency with multiple SOAR platforms, including Phantom, FortiSOAR, and Cortex XSOAR, with collaboration across internal and external teams.