Senior SOC Engineer (Emirati)

Talents Tide; Abu Dhabi; On-site; AED 260,000 - 420,000; Full time

Job summary

Talents Tide is seeking a Senior SOC Engineer to join a UAE-based cybersecurity team. You will manage Splunk SIEM and UEBA in a live Security Operations Center, onboarding log sources and tuning telemetry to keep the platform fast and reliable.

Lead data ingestion, parsing, correlation, dashboards and alerts; develop detection use cases with threat intel, and coordinate with IT/DevOps to improve SOC efficiency. Strong SPL and Cloud knowledge required.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field.
• 3 to 5 years in SOC operations, with significant hands‑on Splunk SIEM management.
• Strong SPL skills for complex queries, dashboards and reports.
• Experience with Splunk UEBA and related tools such as Cribl.
• Working knowledge of SOC workflows, the MITRE ATT&CK framework and threat detection.
• Solid cloud and network knowledge for log source onboarding and troubleshooting.
• Scripting skills in Python, Bash or PowerShell.
• Clear written and verbal communication, and sound decisions under pressure.
• Certifications: Splunk Certified Administrator; AWS/Google/Azure architect certifications, CISSP or GIAC preferred.

Responsibilities

• Manage Splunk SIEM services in the SOC and deploy scalable solutions that follow best practice.
• Define data ingestion strategy, parsing logic and correlation rules.
• Onboard new log sources, then monitor and fix critical ones quickly.
• Optimize telemetry for better collection, correlation and reporting.
• Work with SOC and threat intelligence teams to develop detection use cases.
• Build dashboards, alerts and reports for proactive threat monitoring.
• Run system updates, version upgrades and feature rollouts.
• Maintain CIM compliance, field extractions and data normalization.
• Evaluate and deploy Splunk apps and add-ons.
• Document SIEM workflows, configurations and operating procedures.
• Work with IT, DevOps and security teams to improve SOC efficiency.

Skills

Splunk SPL

SOC operations

Python / Bash / PowerShell

Threat detection

MITRE ATT&CK knowledge

Dashboards & reporting

Cribl

Cloud & Networking

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Splunk SIEM

Splunk UEBA

Cribl

Splunk Apps / Add-ons

Job description

Hiring: Senior SOC Engineer

We are hiring a Senior SOC Engineer for a cybersecurity company in the UAE.

You will run the Splunk SIEM and Splunk UEBA services inside a live Security Operations Center. That means onboarding new log sources, tuning telemetry, and keeping the platform fast and reliable.

What you will do

• Manage Splunk SIEM services in the SOC and deploy scalable solutions that follow best practice
• Define data ingestion strategy, parsing logic and correlation rules
• Onboard new log sources, then monitor and fix critical ones quickly
• Optimize telemetry for better collection, correlation and reporting
• Work with SOC and threat intelligence teams to develop detection use cases
• Build dashboards, alerts and reports for proactive threat monitoring
• Run system updates, version upgrades and feature rollouts
• Maintain CIM compliance, field extractions and data normalization
• Evaluate and deploy Splunk apps and add-ons
• Document SIEM workflows, configurations and operating procedures
• Work with IT, DevOps and security teams to improve SOC efficiency

What you bring

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field
• 3 to 5 years in SOC operations, with significant hands‑on Splunk SIEM management
• Strong SPL skills for complex queries, dashboards and reports
• Experience with Splunk UEBA and related tools such as Cribl
• Working knowledge of SOC workflows, the MITRE ATT&CK framework and threat detection
• Solid cloud and network knowledge for log source onboarding and troubleshooting
• Scripting skills in Python, Bash or PowerShell
• Clear written and verbal communication, and sound decisions under pressure

Certifications

• Splunk Certified Administrator
• Preferred: AWS, Google or Azure architect certification, and CISSP or GIAC