Senior Splunk SIEM Engineer - SOC & UEBA Lead

TalentsTide; Abu Dhabi; On-site; AED 240,000 - 360,000; Full time

Job summary

TalentsTide is seeking a Senior SOC Engineer in Abu Dhabi to lead Splunk SIEM/UEBA operations within a live SOC. You will onboard log sources, tune telemetry, and ensure performance and reliability of the Splunk platform.

The role requires hands-on Splunk experience, familiarity with CI/CD in security contexts, and strong collaboration with IT, DevOps and threat intelligence teams. UAE-based on-site work.

Qualifications

• Bachelor’s degree in Computer Science/IT/Cybersecurity is required.
• Splunk Certified Administrator is required.
• Experience with Splunk SIEM and UEBA in a SOC setting.
• Knowledge of MITRE ATT&CK framework and threat detection practices.

Responsibilities

• Manage Splunk SIEM services in the SOC and deploy scalable solutions.
• Define data ingestion strategy, parsing logic and correlation rules.
• Onboard new log sources, monitor and fix critical ones quickly.
• Optimize telemetry for better collection, correlation and reporting.
• Work with SOC and threat intelligence teams to develop detection use cases.
• Build dashboards, alerts and reports for proactive threat monitoring.
• Run system updates, upgrades and feature rollouts.
• Maintain CIM compliance, field extractions and data normalization.
• Evaluate and deploy Splunk apps and add-ons.
• Document SIEM workflows and operating procedures.
• Collaborate with IT/DevOps to improve SOC efficiency.

Skills

SPL scripting

Python scripting

Bash scripting

PowerShell scripting

MITRE ATT&CK knowledge

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Splunk Certified Administrator

AWS/Azure/GCP architect cert

CISSP or GIAC (preferred)

Tools

Splunk SIEM

Splunk UEBA

Cribl

Cloud platforms knowledge

Job description

TalentsTide is seeking a Senior SOC Engineer in Abu Dhabi to lead Splunk SIEM/UEBA operations within a live SOC. You will onboard log sources, tune telemetry, and ensure performance and reliability of the Splunk platform.

The role requires hands-on Splunk experience, familiarity with CI/CD in security contexts, and strong collaboration with IT, DevOps and threat intelligence teams. UAE-based on-site work.