Senior Splunk SIEM Engineer | Threat Detection & SOC

CPX; Abu Dhabi; On-site; AED 260,000 - 420,000; Full time

Job summary

CPX is seeking a Senior SOC Engineer to lead Splunk SIEM management within a fast‑paced SOC environment in Abu Dhabi. You will onboard log sources, optimize telemetry, and maintain CIM compliance while developing detection use cases with threat intel teams.

The role requires hands‑on Splunk experience, strong scripting capabilities, and cloud accreditation to support across IT and security functions. A keen eye for process improvements and customer interfacing is essential.

Qualifications

• 3–5 years of experience in SOC operations, with significant experience in Splunk SIEM management.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.

Responsibilities

• Manage Splunk SIEM services within SOC environment.
• Implement scalable Splunk-based SIEM solutions following best practices.
• Define data ingestion strategies, parsing logic, and correlation rules.
• Onboard new log sources and ensure proper integration with Splunk SIEM.
• Monitor and maintain critical log sources; troubleshoot issues promptly.
• Collaborate with SOC and threat intel teams to develop detection use cases.
• Create dashboards, alerts, and reports for proactive threat monitoring.
• Perform system updates, version upgrades, and feature rollouts.
• Ensure CIM compliance, field extractions, and data normalization.
• Maintain SIEM performance and troubleshoot Splunk-related issues.
• Evaluate and deploy Splunk apps/add-ons as needed.
• Document SIEM workflows, configurations, and procedures.
• Support continuous process improvements to enhance SOC efficiency.

Skills

Splunk

UEBA

CRIBL

SPL

Python

Bash

PowerShell

Cloud Certifications (AWS/GCP/Azure)

CISSP

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Splunk SIEM

Splunk UEBA

Job description

CPX is seeking a Senior SOC Engineer to lead Splunk SIEM management within a fast‑paced SOC environment in Abu Dhabi. You will onboard log sources, optimize telemetry, and maintain CIM compliance while developing detection use cases with threat intel teams.

The role requires hands‑on Splunk experience, strong scripting capabilities, and cloud accreditation to support across IT and security functions. A keen eye for process improvements and customer interfacing is essential.