Senior Splunk SIEM Engineer for SOC & UEBA

CPX; Abu Dhabi; On-site; AED 240,000 - 480,000; Full time

Job summary

CPX is seeking a Senior SOC Engineer in Abu Dhabi to manage Splunk SIEM and UEBA within the Security Operations Center. You will onboard log sources, optimize telemetry, and ensure system updates while supporting SIEM architecture improvements.

The role requires a minimum of 5 years in SOC operations, strong Splunk expertise, and experience in cloud and network technologies. Collaboration with IT, DevOps, and security teams is essential.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Splunk SIEM management and UEBA experience essential.
• Minimum 5 years in SOC operations with strong Splunk experience.

Responsibilities

• Manage Splunk SIEM services within the SOC environment.
• Implement scalable Splunk-based SIEM solutions following best practices.
• Define data ingestion strategies, parsing logic, and correlation rules.
• Onboard new log sources and ensure proper integration with Splunk SIEM.
• Monitor and maintain critical log sources; troubleshoot and resolve issues promptly.
• Optimize telemetry for improved data collection, correlation, and reporting.
• Collaborate with SOC and threat intelligence teams to develop detection use cases.
• Create dashboards, alerts, and reports for proactive threat monitoring.
• Perform system updates, version upgrades, and feature rollouts.
• Ensure CIM compliance, field extractions, and data normalization.
• Maintain SIEM performance and troubleshoot Splunk-related issues.
• Evaluate and deploy Splunk apps and add-ons as needed.
• Document SIEM workflows, configurations, and operational procedures.
• Support continuous process improvements to enhance SOC efficiency.

Skills

Splunk Certified Administrator

SPL mastery

Cloud certifications

CISSP/GIAC preferred

Communication skills

Independent worker

5+ years SOC experience

SOC/ cybersecurity experience

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Splunk SIEM

UEBA

CRIBL

Job description

CPX is seeking a Senior SOC Engineer in Abu Dhabi to manage Splunk SIEM and UEBA within the Security Operations Center. You will onboard log sources, optimize telemetry, and ensure system updates while supporting SIEM architecture improvements.

The role requires a minimum of 5 years in SOC operations, strong Splunk expertise, and experience in cloud and network technologies. Collaboration with IT, DevOps, and security teams is essential.