Senior Elastic Security & Detection Engineer | SIEM Expert

CPX Piceance; Abu Dhabi; On-site; AED 223,000 - 234,000; Full time

Job summary

CPX Piceance in Abu Dhabi seeks a Senior Elastic Security & Detection Engineer to advance enterprise monitoring and detection within Elastic Stack. You will own detections, dashboards, and data pipelines across Elasticsearch, Kibana, Logstash, Beats, and Elastic Agent.

The role requires 5–8 years in cyber security, SIEM engineering, or detection engineering, with strong knowledge of MITRE ATT&CK, threat hunting, and incident response.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field.
• 5–8 years of cybersecurity, SIEM engineering, or detection engineering experience.
• Strong hands-on experience with Elastic Stack components (Elasticsearch, Kibana, Logstash, Beats, Elastic Agent).
• Experience designing detection rules, behavioral analytics, and MITRE ATT&CK-aligned content.

Responsibilities

• Administer, maintain, and optimize Elastic Stack infrastructure and Elasticsearch clusters.
• Design and implement scalable data ingestion pipelines using Logstash, Beats, and Elastic Agent.
• Develop and maintain Kibana dashboards and operational reporting.
• Design, develop, test, and maintain high-fidelity detection use cases within Elastic Security.
• Create and enhance detection content aligned with MITRE ATT&CK framework.
• Conduct threat hunting and support incident investigations.
• Onboard new log sources and ensure normalization and enrichment.
• Develop runbooks and detection engineering standards.

Skills

Elasticsearch

Kibana

Logstash

Beats

Elastic Agent

Elastic Security (SIEM)

Detection engineering

Threat hunting

MITRE ATT&CK

Incident monitoring

Education

Bachelor's degree

Tools

Elastic Stack tooling

MITRE ATT&CK framework

Job description

CPX Piceance in Abu Dhabi seeks a Senior Elastic Security & Detection Engineer to advance enterprise monitoring and detection within Elastic Stack. You will own detections, dashboards, and data pipelines across Elasticsearch, Kibana, Logstash, Beats, and Elastic Agent.

The role requires 5–8 years in cyber security, SIEM engineering, or detection engineering, with strong knowledge of MITRE ATT&CK, threat hunting, and incident response.