Senior SIEM/SOAR Engineer - QRadar & Sentinel Lead

Halian | Managed Services, Recruitment and Contract Staffing Agency; Abu Dhabi; Vor Ort; AED 320.000 - 520.000; Vollzeit

Zusammenfassung

Halian, a leading managed services and recruitment firm, seeks a Senior Security Operations Engineer (SIEM/SOAR) in Abu Dhabi. You will design and optimize enterprise security monitoring, focusing on SIEM and SOAR platforms within a regulated environment.

You will lead detection engineering, automate response workflows, and ensure audit-ready security operations. The role requires expertise in QRadar, Microsoft Sentinel, and cloud/on‑premise integrations.

Qualifikationen

• 5–10 years of experience in Security Operations, SIEM Engineering, or Cybersecurity Operations.
• Experience with IBM QRadar and Microsoft Sentinel.
• Strong hands‑on with KQL/AQL, and log parsing/normalization.

Aufgaben

• Design, implement, and maintain enterprise SIEM platforms (QRadar and Sentinel).
• Lead SIEM modernization, migrations (QRadar to Sentinel) and data retention planning.
• Develop detections aligned with MITRE ATT&CK and threat intel.
• Design and implement SOAR playbooks; automate enrichment, investigation, and response.
• Support audits, runbooks, and operational procedures in a regulated SOC.

Kenntnisse

QRadar

Microsoft Sentinel

SIEM Engineering

SOAR Automation

Detection Engineering

MITRE ATT&CK

KQL

AQL

PowerShell

Python

Ausbildung

Bachelor's degree in Computer Science/Information Security/Engineering

Tools

QRadar

Microsoft Sentinel

Azure Monitor Agent

Terraform/ARM/Bicep

Jobbeschreibung

Halian, a leading managed services and recruitment firm, seeks a Senior Security Operations Engineer (SIEM/SOAR) in Abu Dhabi. You will design and optimize enterprise security monitoring, focusing on SIEM and SOAR platforms within a regulated environment.

You will lead detection engineering, automate response workflows, and ensure audit-ready security operations. The role requires expertise in QRadar, Microsoft Sentinel, and cloud/on‑premise integrations.