SIEM Admin - Qradar Arcsight

CyberGate Defense L.L.C; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading cybersecurity company in the United Arab Emirates is seeking a SIEM Admin Engineer to handle SIEM tool administration and develop custom parsers. Candidates should have 4-6 years of experience, with knowledge of QRadar/Arcsight and security operations, including incident management and intrusion detection. Excellent communication skills are necessary for effective customer interaction. The role offers a tax-free salary and family medical insurance.

Benefits

Tax-free Salary

Family Medical Insurance

Qualifications

• 4-6 years of experience in SIEM administration.
• Experience with security devices and IT configurations.
• Ability to develop custom parsers and content for SIEM.

Responsibilities

• Administer SIEM tools and develop custom parsers.
• Handle daily activities for SIEM operational integrity.
• Perform upgrades and health checks on SIEM components.

Skills

Knowledge of QRadar/Arcsight

Incident management

Intrusion detection

Firewall deployment

Security event analysis

Communication skills

Job description

Job Title

SIEM Admin Engineer

Job Description

CyberGate Defense a leading cybersecurity company is seeking a SIEM Admin Engineer with 4-6 years of experience to join our team. The successful candidate will be responsible for the administration of SIEM Tools and developing custom parsers.

Responsibilities

• Deep knowledge of QRadar/Arcsight; other SIEM technology expertise also helpful.
• Security operations experiences such as incident management, intrusion detection, firewall deployment, and security event analysis.
• Experience with security devices and general IT installations configuration and troubleshooting (e.g., Firewall, IDS, etc.).
• Development of custom parsers, Use Cases, and finetuning the UseCase based on the inputs from the SOC team.
• Handle day‑to‑day activities required to achieve and maintain SIEM operational integrity.
• Perform upgrades on the QRadar/Arcsight SIEM components.
• Deploy new Console, Event Processor, Data Node & Collector as required to collect data feeds.
• Investigate and debug alerts generated in the console.
• Review configurations for potential security weaknesses.
• Develop content including rules, reports, and dashboards.
• Perform QA (Quality Assurance) function on content developed by other parties.
• Health checks that need to be performed on the SIEM.
• Excellent communication and customer interaction skills.

Benefits

• Tax‑free Salary
• Family Medical Insurance