Senior Information Security & SIEM Architect

Core42; Dubai; On-site; AED 380,000 - 600,000; Full time

Benefits offered by this job

Competitive Salary

Yearly Bonus

Discount Cards (Esaad/Fazaa)

Premium Health Insurance

Learning & Development

Job summary

Core42 is seeking a Specialist - Information Security in Abu Dhabi, UAE, to lead hands-on security operations across Microsoft Defender XDR, CrowdStrike, Elastic, Corelight, and cloud security. You will architect Sentinel deployments, build detection use cases, and drive incident response in a large enterprise environment.

The role emphasizes advanced hunting, MITRE ATT&CK mappings, and integration across the Microsoft security stack with BAU operations and ongoing improvements.

Qualifications

• 7-8 years of cybersecurity experience with hands-on SOC/ security operations
• Strong expertise in Microsoft Sentinel architecture and deployment in large environments
• Advanced KQL skills for analytics, hunting, dashboards and detection engineering
• Experience with Defender XDR/EDR, CrowdStrike, Elastic, Corelight, and cloud security
• Proficiency in SOAR, Logic Apps, and incident response processes

Responsibilities

• Design and implement Microsoft Sentinel architectures for enterprise, hybrid and multi-cloud environments
• Onboard telemetry using connectors, Syslog, CEF, APIs and custom ingestion
• Integrate Sentinel with Defender, CrowdStrike, Elastic and Corelight
• Develop KQL-based rules, dashboards and MITRE-aligned detection use cases
• Implement SOAR automation rules and playbooks for response workflows
• Own day-to-day Sentinel administration, monitoring, and platform health
• Troubleshoot ingestion issues, log gaps and integration problems
• Mentor junior SOC/security engineers and improve detection quality

Skills

Microsoft Sentinel

KQL

Threat hunting

MITRE ATT&CK

SOAR

Defender XDR

CrowdStrike Falcon EDR

Elastic EDR

Corelight NDR

Red Hat OpenShift

OpenStack security

Microsoft Defender for Cloud

Cloud security

Tools

OpenShift

OpenStack

Kubernetes

REST APIs

Job description

Core42 is seeking a Specialist - Information Security in Abu Dhabi, UAE, to lead hands-on security operations across Microsoft Defender XDR, CrowdStrike, Elastic, Corelight, and cloud security. You will architect Sentinel deployments, build detection use cases, and drive incident response in a large enterprise environment.

The role emphasizes advanced hunting, MITRE ATT&CK mappings, and integration across the Microsoft security stack with BAU operations and ongoing improvements.