Security Engineer NDR

Core42; Abu Dhabi; On-site; AED 150,000 - 210,000; Full time

Benefits offered by this job

Competitive Salary

Yearly Bonus

Discount Cards Esaad and Fazaa

Premium Family Insurance

Learning & Development

Job summary

Core42 in Abu Dhabi is seeking an experienced Security Engineer focusing on Corelight NDR and Cloudflare platforms to strengthen our cyber defense posture across enterprise and cloud environments. You will work with Platform Engineering, SOC, Incident Response, and Network Security teams to design, implement, and optimize detection capabilities, DDoS protection, WAF, and Zero Trust controls.

We value hands-on experience with Corelight, Zeek, Suricata, and Cloudflare services, plus scripting

Qualifications

• Bachelor's degree in Cyber Security, CS, Info Security or IT Engineering.
• 5-7 years of cybersecurity experience managing network security technologies.
• Hands-on with Corelight NDR or Zeek-based solutions.
• Hands-on with Cloudflare security services.
• Experience in SOC, incident response, threat hunting or security engineering.
• Strong fundamentals: TCP/IP, DNS, HTTP/HTTPS, TLS and packet analysis.
• Knowledge of Corelight NDR, Zeek and Suricata.
• Experience with Cloudflare WAF, Access, Zero Trust, DDoS protection, DNS security.
• Certifications: Cloudflare Certified Administrator, Security+ or equivalent.

Responsibilities

• Design, deploy, and maintain Corelight NDR sensors across environments.
• Develop and tune detections with Zeek, Suricata and Corelight PCAP.
• Integrate Corelight with SIEM and SOC platforms.
• Manage Cloudflare security services including WAF and DNS security.
• Lead incident response and threat hunting activities.
• Implement MITRE ATT&CK aligned coverage.
• Develop automation scripts with Python and PowerShell.
• Ensure governance with NIST/ISO controls.

Skills

Corelight NDR

Zeek

Network security fundamentals

Incident response

Threat hunting

Python scripting

PowerShell scripting

SOC experience

DNS security

WAF

Education

Bachelor's degree in Cyber Security, CS, Info Security or IT Engineering

Cloudflare Certified Administrator

Security+ or equivalent

Tools

Corelight NDR

Zeek

Suricata

Cloudflare WAF

Cloudflare DNS

Cribl

Job description

About Us

Core42, a leader in AI-powered cloud and digital infrastructure, is driving transformative technology solutions globally. Leveraging advanced resources and partnerships, Core42 empowers clients to harness sovereign AI infrastructure, especially in sectors with stringent regulatory needs. With a mission to redefine digital transformation, we combine sovereign capabilities with scalable, high-performance compute infrastructure, positioning itself at the forefront of AI innovation in the Middle East and beyond.

The opportunity

Security Engineer - NDR & Cloudflare, Core42 - Abu Dhabi, UAE. We are seeking an experienced Security Engineer responsible for the design, implementation, administration and continuous improvement of the organisation's Corelight Network Detection & Response (NDR) and Cloudflare platforms. The role will focus on enhancing network visibility, threat detection, Zero Trust security, DDoS protection, WAF, web application security, DNS security and incident response capabilities across enterprise and cloud environments. The candidate will work closely with Platform Engineering, SOC, Incident Response, Network Engineering, Infrastructure, Cloud and Security Architecture teams to strengthen the organisation's cyber defence posture.

Your key responsibilities

Corelight NDR administration & engineering

• Design, deploy, manage and maintain Corelight sensors across enterprise, cloud and data centre environments

• Develop and optimise network detection use cases leveraging Zeek, Suricata, Corelight Smart PCAP, threat intelligence integrations and YARA

• Ensure complete east-west and north-south traffic visibility

• Establish network baselines and anomaly detection capabilities

• Integrate Corelight with SIEM and SOC platforms

• Monitor health, performance and capacity of NDR infrastructure

Detection engineering & threat hunting

• Develop and tune custom Corelight detections

• Create behavioural and anomaly-based detection use cases

• Conduct proactive threat hunting using network telemetry, DNS, HTTP and TLS logs, SMB activity and authentication traffic

• Implement MITRE ATT&CK aligned detection coverage

• Reduce false positives while improving detection fidelity

Cloudflare security administration

• Design and manage web application security services including WAF, bot management, rate limiting, API security and custom security rules

• Manage DNS security including Cloudflare DNS, DNSSEC and secure DNS policies

• Deliver Zero Trust security using Cloudflare Access, Secure Web Gateway, browser isolation, identity integrations and device trust controls

• Manage network protection services including DDoS protection, Magic Transit, Magic Firewall and Magic WAN

Incident response & investigations

• Investigate network-based attacks and anomalies

• Support malware investigations and forensic activities

• Perform packet analysis and network forensics

• Lead triage and containment activities during security incidents

• Develop and maintain incident response playbooks

Security monitoring

• Enhance detection coverage across cloud, network, data centre and internet edge

• Develop KPIs and security metrics

• Identify security gaps and recommend improvements

Integration & automation

• Integrate Corelight and Cloudflare with IDP, SIEM, Cribl, EDR, ITSM, threat intelligence platforms, SOAR platforms, LDAP, AI, ML and CMDB

• Develop automation scripts using Python, PowerShell and REST APIs

Governance, compliance & security standards

• Ensure solutions align with NIST 800-53, NIST CSF, ISO 27001, CIS Controls, SOC 2, UAE Information Assurance Standards, internal policies and procedures, and regulatory requirements

• Support audits and compliance assessments

What we’re looking for

(a) Required skills / qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Security or IT Engineering

• 5-7 years of cybersecurity experience managing network security technologies

• Hands-on experience with Corelight NDR or Zeek-based solutions

• Hands-on experience with Cloudflare security services

• Experience supporting enterprise-scale networks and cloud environments

• Experience in SOC, incident response, threat hunting or security engineering functions

• Strong network security fundamentals: TCP/IP, DNS, HTTP/HTTPS, TLS and packet analysis

• Corelight NDR, Zeek and Suricata

• Cloudflare WAF, Cloudflare Access, Zero Trust, DDoS protection, DNS security, Magic Transit, Magic Firewall and Cloudflare Analytics

(b) Preferred skills / qualifications

• Python and PowerShell scripting

• Certifications: Cloudflare Certified Administrator, Security+ or equivalent certifications in network security

What working at Core42 offers

With a diverse team of 1,100+ employees from 68 nationalities, we foster an inclusive, innovative and collaborative environment. At Core42, we foster a culture grounded in trust, accountability and high performance. We are united by our values: Grit, where we overcome challenges with resilience and determination, Passion, which drives us to pursue excellence in everything we do, and Impact, as we aim to inspire progress and create meaningful change. Our team members thrive in an environment where each person’s contributions propel us forward, and together, we commit to achieving extraordinary results.

• Competitive Salary: We offer an attractive salary package based on your skills and experience

• Yearly Bonus: In recognition of your contributions, you will receive a performance-based annual bonus

• Exclusive Discount Cards: Access special benefits with Esaad and Fazaa cards, offering discounts across a wide range of services

• Premium Family Insurance: We provide comprehensive health coverage, including dental, vision and life insurance, ensuring the well‑being of you and your family

• Learning & Development: We offer access to top-tier learning platforms to help you grow in your career. Learn at your own pace with unlimited access to premium courses.

… more