Senior SOC Engineer — SIEM & SOAR Lead

CPX; Abu Dhabi; Sur place; AED 300 000 - 540 000; Plein temps

Résumé du poste

CPX seeks a Lead Engineer – SOC (SIEM & SOAR) to drive Splunk SIEM/SOAR management within the SOC. You will onboard new log sources, optimize telemetry, and ensure system updates and issue resolution to maintain Splunk performance and security.

Role requires proficiency in field extractions, CIM, and CAL/SOAR integrations with ServiceNow, threat intel, and endpoint tools; prior experience with Splunk SOAR, Forti SOAR, or Cortex XSOAR is preferred.

Qualifications

• At least 8 years in SOC operations with Splunk SIEM management.
• Experience in a technical SOC/cybersecurity environment is required.

Responsabilités

• Deliver Splunk SIEM/SOAR management within the SOC.
• Onboard new log sources to SIEM/SOAR platforms.
• Maintain and govern SOC critical log sources with Splunk integration.
• Diagnose and resolve log source issues with customers.
• Enhance telemetry and data collection in Splunk environment.
• Perform regular Splunk updates ensuring security and functionality.
• Design SOAR Playbooks to improve automation.
• Connect SOAR with SIEM, ticketing, and threat intel platforms.

Connaissances

SPL mastery

Python scripting

SOC operations

Formation

Bachelor's degree in CS/IT/Cybersecurity

Outils

Splunk SIEM

Splunk SOAR (Phantom)

Forti SOAR

Cortex XSOAR

CRIBL

Description du poste

CPX seeks a Lead Engineer – SOC (SIEM & SOAR) to drive Splunk SIEM/SOAR management within the SOC. You will onboard new log sources, optimize telemetry, and ensure system updates and issue resolution to maintain Splunk performance and security.

Role requires proficiency in field extractions, CIM, and CAL/SOAR integrations with ServiceNow, threat intel, and endpoint tools; prior experience with Splunk SOAR, Forti SOAR, or Cortex XSOAR is preferred.