Senior Engineer – SOC (SOAR)

CPX; Abu Dhabi; On-site; AED 223,000 - 234,000; Full time

Job summary

CPX is seeking an experienced SOC SOAR engineer to manage and enhance our security orchestration, automation, and response capabilities. You will work hands-on with Splunk SOAR, FortiSOAR, or Cortex XSOAR, onboard new log sources, and integrate with SIEM and threat intel to strengthen incident response.

The role requires at least 5 years in SOC operations with hands-on SOAR management, strong cloud and network knowledge, and ability to design effective playbooks in a fast-paced environment.

Qualifications

• 5+ years in SOC operations with SOAR management.
• Experience onboarding log sources and integrations.
• Understanding of MITRE ATT&CK framework.
• Strong cloud and network knowledge for log onboarding.
• Ability to design and maintain SOAR playbooks.

Responsibilities

• Manage and maintain SOAR services within the SOC environment.
• Hands-on experience with Splunk SOAR, FortiSOAR, or Cortex XSOAR.
• Onboard new log sources and integrations with SOC and stakeholders.
• Ensure proper functionality and integration of log sources with SIEM/SOAR.
• Design and implement SOAR playbooks and workflows for automation and incident response.
• Integrate SOAR with SIEM, threat intel, ticketing systems and other security tools.
• Work with SOC analysts to streamline triage, investigation, and remediation processes.
• Maintain and update SOAR components; monitor performance and troubleshoot issues.
• Develop custom scripts and connectors to enhance automation capabilities.
• Refine playbooks based on evolving threats and feedback.
• Document workflows, integrations, and procedures.
• Ensure compliance with internal policies and regulatory requirements.
• Support process improvements to increase SOC efficiency.

Skills

Splunk SOAR

FortiSOAR

Cortex XSOAR

Python scripting

Cloud certifications

CISSP

SOAR automation

SOC operations

SOC experience

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

FortiSOAR

Splunk SOAR

Cortex XSOAR

Job description

Important Note: -Given the urgency of this position, the recruitment process has been accelerated. Interviews are progressing actively, with all candidate assessments expected to be completed over the next two weeks.

• Salary - AED 20,000 - AED 21,0000 per month
• Duration - 1 year (can be extendable)
• Required Notice Period -Immediate or max 1 month

Mandate Requirement

Education - Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.

Skills/Certifications (Technical & Non-Technical)

• Experience with platforms like Forti SOAR, Splunk SOAR, Cortex XSOAR etc.
• Vendor Certifications and training for SOAR tools.
• Python scripting skills.
• Cloud-related certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert.
• Certified Information Systems Security Professional (CISSP), GIAC is preferred.
• Automation and Orchestration of cyber incident with accuracy and consistency.
• A minimum of 5 years of experience in SOC operations, with significant experience in SOAR management.
• Prior experience in a technical role within a SOC or similar cybersecurity environment.

Education

Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.

Key Responsibilities:

• Manage and maintain SOAR services within the SOC environment.
• Hands-on experience with platforms like Splunk SOAR, FortiSOAR, or Cortex XSOAR.
• Onboard new log sources and integrations into SOAR in collaboration with SOC and stakeholders.
• Ensure proper functionality and integration of critical log sources with SIEM/SOAR.
• Design and implement SOAR playbooks and workflows for automation and incident response.
• Integrate SOAR with SIEM, threat intelligence, ticketing systems, and other security tools.
• Work with SOC analysts to streamline triage, investigation, and remediation processes.
• Maintain and update SOAR components; monitor performance and troubleshoot issues.
• Develop custom scripts and connectors to enhance automation capabilities.
• Continuously refine playbooks based on evolving threats and feedback.
• Document workflows, integrations, and operational procedures.
• Ensure compliance with internal policies and regulatory requirements.
• Support process improvements to increase SOC efficiency and effectiveness

Characteristics:

• Profound knowledge and hands-on experience with Splunk SOAR and other related SOC Technologies like SIEM, EDR, NDR amongst others.
• Understanding of SOC workflows, MITRE ATT&CK framework, and threat detection methodologies.
• Ability to correlate data across multiple sources to identify patterns and anomalies.
• Strong understanding of cloud and network technologies, essential for efficient log source onboarding.
• Proven technical capabilities in a complex, fast-paced SOC environment.
• Ability to diagnose and troubleshoot log source issues related to cloud and network infrastructures.
• Strong understanding of SOC operations, cybersecurity principles, and best practices.
• Excellent problem-solving skills and the ability to make decisions under pressure.
• Ability to collaborate effectively with a variety of team members, including interfacing with customers to resolve issues.
• High proficiency in written and verbal communication.