Senior Security Engineer—Remote SIEM/Cloud Threat Response

Jobgether; United Arab Emirates; Remote; AED 420,000 - 660,000; Full time

Benefits offered by this job

Remote work

Equity

Paid time off

Coworking access

Team events

Equipment

Home office budget

Learning budget

Healthcare

Onboarding support

Job summary

Jobgether is seeking a Security Engineer III - Security Operations based in the United Arab Emirates. You will own key detection and response capabilities, build SIEM detections, automate workflows, and develop tooling with Python and IaC.

You will operate across Elastic SIEM and AWS, triage incidents, document investigations, and contribute to SOC 2/PCI DSS compliance while participating in on-call rotations. A globally distributed team values autonomy and continuous learning.

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections.
• Elastic preferred; Splunk or Microsoft Sentinel also suitable.
• Experience securing AWS environments and cloud-native detections.
• Proficiency in Python for scripting and tooling.
• Experience with Terraform or other IaC technologies.
• Knowledge of MITRE ATT&CK and its application to threat detection.
• Proven triage, investigation, and incident resolution skills.
• Strong written communication and ability to own outcomes independently.

Responsibilities

• Own detection and response initiatives from rule creation to automated workflows.
• Build, tune, and maintain detections across cloud environments to close gaps.
• Manage incident queue: triage alerts, investigate, escalate, and drive resolution.
• Document investigations and findings for follow-up and knowledge sharing.
• Develop runbooks and automation using Python and no-code tools.
• Make risk decisions and escalate when needed.
• Support compliance by maintaining audit-ready controls and evidence.
• Use Terraform and Python to improve security tooling and detections.
• Participate in on-call rotation for monitoring and response.
• Continuously improve detection coverage and response efficiency.

Skills

SIEM detections

AWS security

Python scripting

Terraform

Incident response

MITRE ATTACK

Communication

Independent ownership

Tools

Elastic SIEM

Splunk

Microsoft Sentinel

SOAR tools

Job description

Jobgether is seeking a Security Engineer III - Security Operations based in the United Arab Emirates. You will own key detection and response capabilities, build SIEM detections, automate workflows, and develop tooling with Python and IaC.

You will operate across Elastic SIEM and AWS, triage incidents, document investigations, and contribute to SOC 2/PCI DSS compliance while participating in on-call rotations. A globally distributed team values autonomy and continuous learning.