Senior SIEM Admin

Moro Hub; Dubai; On-site; AED 420,000 - 720,000; Full time

Job summary

Moro Hub in Dubai seeks an expert to lead the administration, optimization, scalability, and continuous improvement of the organization’s SIEM and Splunk infrastructure. You will ensure resilient security monitoring, advanced detection capabilities, and platform performance across enterprise environments.

The role requires 8–10 years in SIEM or security engineering, strong SPL skills, and experience with cloud/hybrid SIEM integrations.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 8–10 years of experience in SIEM administration, or Security Engineering.
• Advanced SIEM architecture and administration.
• Distributed SIEM infrastructure management.
• Advanced SPL query and dashboard development.
• SIEM tuning and performance optimization.
• Log parsing, normalization, and onboarding.
• SOAR, EDR/XDR, and threat intelligence integrations.
• Python, Bash, or PowerShell scripting.
• Infrastructure troubleshooting and root cause analysis.
• Storage, indexing, and retention optimization.
• Cloud and hybrid SIEM integrations.
• OT/IoT log monitoring concepts.

Responsibilities

• Ensure SIEM platform availability, performance, and operational stability.
• Lead troubleshooting and resolution of complex SIEM issues.
• Maintain dashboards, reporting, upgrades, and platform documentation.
• Lead Splunk infrastructure and SIEM administration activities
• Oversee log management, integrations, and monitoring enhancements
• Support SOC and Detection Engineering operational requirements
• Enhance SIEM scalability, resilience, and monitoring capabilities
• Drive SIEM optimization and automation initiatives
• Support continuous improvement of enterprise detection capabilities.

Skills

SIEM administration

Splunk

Threat detection

Scripting (Python/Bash/PowerShell)

Log management

Distributed SIEM architecture

Cloud & hybrid SIEM

Root cause analysis

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

Splunk Platform

SOAR Integrations

EDR/XDR

Cloud SIEM tooling

OT/IoT log monitoring tools

Job description

Lead the administration, optimization, scalability, and continuous improvement of the organization’s SIEM and Splunk infrastructure, ensuring resilient security monitoring, advanced detection capabilities, platform performance, and operational excellence across enterprise environments.

Responsibilities:

• Ensure SIEM platform availability, performance, and operational stability.
• Lead troubleshooting and resolution of complex SIEM issues.
• Maintain dashboards, reporting, upgrades, and platform documentation.
• Lead Splunk infrastructure and SIEM administration activities
• Oversee log management, integrations, and monitoring enhancements
• Support SOC and Detection Engineering operational requirements
• Enhance SIEM scalability, resilience, and monitoring capabilities
• Drive SIEM optimization and automation initiatives
• Support continuous improvement of enterprise detection capabilities.

Experience and Job Specific Skills:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Should have 8–10 years of experience in SIEM administration, or Security Engineering.
• Advanced SIEM architecture and administration.
• Distributed SIEM infrastructure management.
• Advanced SPL query and dashboard development.
• SIEM tuning and performance optimization.
• Log parsing, normalization, and onboarding.
• SOAR, EDR/XDR, and threat intelligence integrations.
• Python, Bash, or PowerShell scripting.
• Infrastructure troubleshooting and root cause analysis.
• Storage, indexing, and retention optimization.
• Cloud and hybrid SIEM integrations.
• OT/IoT log monitoring concepts.