Senior Splunk SIEM/SOAR Lead Engineer

CPX; Abu Dhabi; On-site; AED 350,000 - 660,000; Full time

Job summary

CPX is seeking a Lead Engineer – SOC (SIEM & SOAR) to deliver and optimize Splunk SIEM/SOAR within the SOC. You will work with internal and external teams to onboard new log sources and enhance telemetry for accurate data collection, correlation and reporting.

The role requires deep Splunk expertise, playbook design for automation, and strong collaboration across stakeholders. You will mentor junior SOC engineers and help drive SOC performance and security posture in a fast-paced environment.

Qualifications

• 8+ years in SOC operations with substantial Splunk SIEM management experience.
• Experience in technical SOC roles or cybersecurity environments.

Responsibilities

• Deliver Splunk SIEM/SOAR management services in the SOC.
• Onboard new log sources to SIEM/SOAR platform.
• Maintain and govern critical SOC log sources with Splunk integration.
• Detect and diagnose log source issues with customers.
• Enhance telemetry in Splunk for better data collection and reporting.
• Perform regular Splunk updates for security and functionality.
• Resolve Splunk-related issues promptly.
• Proficiency in field extractions, data normalization, and CIM compliance.
• Maintain Splunk SIEM/SOAR performance per best practices.
• Design SOAR Playbooks for automation and orchestration.
• Integrate SOAR with SIEM, ServiceNow, threat intel, and endpoint tools.
• Experience with Splunk SOAR, Forti SOAR, or Cortex XSOAR.
• Contribute to SOC architecture strategy and implementation.
• Mentor junior SOC engineers.

Skills

SPL

Python scripting

SPLUNK SPL PROC

SPLUNK SPL

Cortex XSOAR

Forti SOAR

Cloud certifications

CISSP

GIAC

CCNA/CCNP

Education

Bachelor's degree in Computer Science, IT, Cybersecurity

Tools

Splunk SIEM/SOAR

Splunk SOAR (Phantom)

CRIBL

ServiceNow

Job description

CPX is seeking a Lead Engineer – SOC (SIEM & SOAR) to deliver and optimize Splunk SIEM/SOAR within the SOC. You will work with internal and external teams to onboard new log sources and enhance telemetry for accurate data collection, correlation and reporting.

The role requires deep Splunk expertise, playbook design for automation, and strong collaboration across stakeholders. You will mentor junior SOC engineers and help drive SOC performance and security posture in a fast-paced environment.