Senior Splunk SIEM/SOAR Lead

CPX Security; Abu Dhabi; On-site; AED 250,000 - 420,000; Full time

Job summary

CPX Security in Abu Dhabi is seeking a Lead Engineer – SOC (SIEM & SOAR) to manage Splunk SIEM/SOAR services, onboard log sources, and optimize telemetry within the SOC environment.

You will design playbooks, integrate with ServiceNow and threat intel, mentor junior engineers, and ensure Splunk performance and security are up to date.

Candidates should have 8+ years in SOC, certifications like Splunk, CISSP/GIAC, and cloud credentials.

Qualifications

• 8+ years in SOC operations with Splunk SIEM management.
• Experience onboarding log sources, telemetry optimization, and SOAR integration.
• Bachelor's degree in CS/IT/Cybersecurity.

Responsibilities

• Deliver Splunk SIEM/SOAR management within the SOC environment.
• Onboard new log sources to the SIEM/SOAR platform with stakeholders.
• Maintain and govern Splunk log sources and integrations.
• Design SOAR Playbooks to enhance automation and orchestration.
• Collaborate with customers to diagnose issues and improve telemetry.
• Mentor junior SOC engineers.
• Provide reports on Splunk services and SOC operations.
• Contribute to SOC architecture strategy related to Splunk.

Skills

Splunk SPL mastery

Splunk Certified Architect

Splunk Certified Administrator

Python scripting

Cloud certifications

CISSP/GIAC

Networking CCNA/CCNP

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Forti SOAR

Splunk SOAR (Phantom)

Cortex XSOAR

ServiceNow

Cribl

Job description

CPX Security in Abu Dhabi is seeking a Lead Engineer – SOC (SIEM & SOAR) to manage Splunk SIEM/SOAR services, onboard log sources, and optimize telemetry within the SOC environment.

You will design playbooks, integrate with ServiceNow and threat intel, mentor junior engineers, and ensure Splunk performance and security are up to date.

Candidates should have 8+ years in SOC, certifications like Splunk, CISSP/GIAC, and cloud credentials.