Senior SIEM/XDR Detection Engineer

PricewaterhouseCoopers Schweiz; United Arab Emirates; On-site; AED 150,000 - 230,000; Full time

Job summary

PricewaterhouseCoopers Schweiz is seeking a Security Operations professional to monitor, investigate, and analyze security events using SIEM solutions in the UAE.

You will correlate logs, perform event analysis using MITRE ATT&CK and NIST, and develop automations to optimize monitoring and investigations. You will prepare technical and executive reports and stay current with cyber threats and technologies.

Qualifications

• Completed undergraduate degree in Information Security, Computer Science, Software Engineering, or related field.
• Experience with SIEM and log correlation.
• Experience in SOC environments.
• Ability to communicate technical findings to non-technical audiences.

Responsibilities

• Monitor, investigate and analyze security events using SIEM solutions.
• Correlate logs to identify threats and incidents.
• Perform event analysis using MITRE ATT&CK and NIST frameworks.
• Develop automations and scripts to optimize monitoring and investigation processes.
• Prepare technical and executive reports presenting findings and recommendations.
• Identify patterns, anomalies and trends in large data sets.
• Contribute to evolving detection and response processes.
• Stay updated on threat landscape and security technologies.

Skills

SIEM experience

Log analysis

Scripting (Python)

Shell scripting

MITRE ATT&CK

NIST frameworks

English proficiency

Analytical skills

Communication

Teamwork

Education

Bachelor's degree in Information Security

Tools

XSIAM

Google SecOps

Microsoft Sentinel

Sigma

Job description

PricewaterhouseCoopers Schweiz is seeking a Security Operations professional to monitor, investigate, and analyze security events using SIEM solutions in the UAE.

You will correlate logs, perform event analysis using MITRE ATT&CK and NIST, and develop automations to optimize monitoring and investigations. You will prepare technical and executive reports and stay current with cyber threats and technologies.