Senior SOC Engineer: Splunk SIEM & Threat Detection Lead

CPX; Abu Dhabi; On-site; AED 223,000 - 234,000; Full time

Job summary

CPX in Abu Dhabi is seeking a Senior SOC Engineer to manage Splunk SIEM and UEBA within the Security Operations Center. You will onboard new log sources, optimize telemetry, apply CIM-compliant data normalization, and drive SIEM performance improvements.

The ideal candidate has at least 5 years in SOC, Splunk SIEM experience, SPL proficiency, and relevant cloud certifications; excellent communication, and the ability to lead initiatives and work independently in a fast-paced environment.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field.
• Splunk Certified Administrator.
• Mastery of SPL (Search Processing Language) for complex queries, dashboards, and reports.
• Cloud-related certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert.
• Certified Information Systems Security Professional (CISSP), GIAC is preferred.
• Excellent communication and documentation skills.
• Ability to lead technical initiatives and work independently.
• A minimum of 5 years of experience in SOC operations, with significant experience in Splunk SIEM management.
• Prior experience in a technical role within a SOC or similar cybersecurity environment.

Responsibilities

• Manage Splunk SIEM services within the SOC environment.
• Implement scalable Splunk-based SIEM solutions following best practices.
• Define data ingestion strategies, parsing logic, and correlation rules.
• Onboard new log sources and ensure proper integration with Splunk SIEM.
• Monitor and maintain critical log sources; troubleshoot and resolve issues promptly.
• Optimize telemetry for improved data collection, correlation, and reporting.
• Collaborate with SOC and threat intelligence teams to develop detection use cases.
• Create dashboards, alerts, and reports for proactive threat monitoring.
• Perform system updates, version upgrades, and feature rollouts.
• Ensure CIM compliance, field extractions, and data normalization.
• Maintain SIEM performance and troubleshoot Splunk-related issues.
• Evaluate and deploy Splunk apps and add-ons as needed.
• Document SIEM workflows, configurations, and operational procedures.
• Support continuous process improvements to enhance SOC efficiency. Work cross-functionally with IT, DevOps, and security teams.

Skills

Splunk SIEM

SPL mastery

Threat detection

Communication skills

Independent work

Education

Bachelor's degree in CS/IT/Cybersecurity or related field

Tools

Splunk

AWS Cloud Certification

GCP Cloud Certification

Azure Cloud Certification

CISSP

GIAC

Job description

CPX in Abu Dhabi is seeking a Senior SOC Engineer to manage Splunk SIEM and UEBA within the Security Operations Center. You will onboard new log sources, optimize telemetry, apply CIM-compliant data normalization, and drive SIEM performance improvements.

The ideal candidate has at least 5 years in SOC, Splunk SIEM experience, SPL proficiency, and relevant cloud certifications; excellent communication, and the ability to lead initiatives and work independently in a fast-paced environment.