Senior SOC Engineer

TalentsTide; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

TalentsTide is seeking a Senior SOC Engineer in Abu Dhabi to lead Splunk SIEM/UEBA operations within a live SOC. You will onboard log sources, tune telemetry, and ensure performance and reliability of the Splunk platform.

The role requires hands-on Splunk experience, familiarity with CI/CD in security contexts, and strong collaboration with IT, DevOps and threat intelligence teams. UAE-based on-site work.

Qualifications

• Bachelor’s degree in Computer Science/IT/Cybersecurity is required.
• Splunk Certified Administrator is required.
• Experience with Splunk SIEM and UEBA in a SOC setting.
• Knowledge of MITRE ATT&CK framework and threat detection practices.

Responsibilities

• Manage Splunk SIEM services in the SOC and deploy scalable solutions.
• Define data ingestion strategy, parsing logic and correlation rules.
• Onboard new log sources, monitor and fix critical ones quickly.
• Optimize telemetry for better collection, correlation and reporting.
• Work with SOC and threat intelligence teams to develop detection use cases.
• Build dashboards, alerts and reports for proactive threat monitoring.
• Run system updates, upgrades and feature rollouts.
• Maintain CIM compliance, field extractions and data normalization.
• Evaluate and deploy Splunk apps and add-ons.
• Document SIEM workflows and operating procedures.
• Collaborate with IT/DevOps to improve SOC efficiency.

Skills

SPL scripting

Python scripting

Bash scripting

PowerShell scripting

MITRE ATT&CK knowledge

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Splunk Certified Administrator

AWS/Azure/GCP architect cert

CISSP or GIAC (preferred)

Tools

Splunk SIEM

Splunk UEBA

Cribl

Cloud platforms knowledge

Job description

Job Location: Abu Dhabi, United Arab Emirates

Work Mode: On-site

Date Posted: 15 October 2026

Job Reference/ID: ed8fa666-f05e-4346-97e2-56999049a85c

Job Description / Role:

We are hiring a Senior SOC Engineer for a cybersecurity company in the UAE. You will run the Splunk SIEM and Splunk UEBA services inside a live Security Operations Center. That means onboarding new log sources, tuning telemetry, and keeping the platform fast and reliable.

Key Responsibilities:

• Manage Splunk SIEM services in the SOC and deploy scalable solutions that follow best practice
• Define data ingestion strategy, parsing logic and correlation rules
• Onboard new log sources, then monitor and fix critical ones quickly
• Optimize telemetry for better collection, correlation and reporting
• Work with SOC and threat intelligence teams to develop detection use cases
• Build dashboards, alerts and reports for proactive threat monitoring
• Run system updates, version upgrades and feature rollouts
• Maintain CIM compliance, field extractions and data normalization
• Evaluate and deploy Splunk apps and add-ons
• Document SIEM workflows, configurations and operating procedures
• Work with IT, DevOps and security teams to improve SOC efficiency

Experience Required:

• 3 to 5 years in SOC operations, with significant hands‑on Splunk SIEM management
• Experience with Splunk UEBA and related tools such as Cribl
• Working knowledge of SOC workflows, the MITRE ATT&CK framework and threat detection
• Solid cloud and network knowledge for log source onboarding and troubleshooting

Education Qualifications:

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field
• Splunk Certified Administrator
• Preferred: AWS, Google or Azure architect certification, and CISSP or GIAC

Skills Required:

• Strong SPL skills for complex queries, dashboards and reports
• Scripting skills in Python, Bash or PowerShell

Employment / Job Type: Full Time

Nationality: UAE National (Emiratisation)

About the Company:

A recruitment and talent solutions provider supporting employers with hiring across commercial, technical and administrative roles. It helps organisations in the Gulf identify, assess and place candidates for permanent and contract positions.

Company Industry: Cybersecurity

Department / Functional Area: Security Operations Center

Closing Date: 15 November 2026