SIEM Admin - Qradar / Arcsight

CyberGate; Abu Dhabi; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading cybersecurity company in Abu Dhabi is seeking a SIEM Admin Engineer to manage SIEM tools and develop custom parsers. The ideal candidate will have 4-6 years of relevant experience, with deep knowledge of QRadar and Arcsight. Responsibilities include incident management, security event analysis, and day-to-day SIEM operations. Strong communication skills are essential for interacting with customers. Join our team to help enhance the digital resilience of organizations in the region.

Qualifications

• 4-6 years of experience in security operations.
• Experience with security devices and general IT installations.
• Strong troubleshooting skills in IT security.

Responsibilities

• Administer SIEM tools and develop custom parsers.
• Handle day-to-day SIEM operations.
• Perform upgrades on SIEM components.
• Investigate and debug alerts.

Skills

Deep knowledge of QRadar

Arcsight expertise

Incident management

Intrusion detection

Firewall deployment

Security event analysis

Communication skills

Tools

SIEM Tools

Firewall

IDS

Job description

Abu Dhabi, United Arab Emirates | Posted on 01/26/2024

CyberGate Defense, an IHC company, is a leading force in cybersecurity innovation, dedicated to enhancing the digital resilience of organizations across the region. Established with the mission to fortify the region’s cybersecurity landscape, CyberGate harnesses extensive expertise to tackle complex information security and operational challenges.

Our commitment to driving progress is reflected in our broad range of cybersecurity services and solutions. By leveraging cutting‑edge, disruptive technologies, we deliver transformative, human‑centric security solutions that safeguard organizations and empower them to navigate a secure and dynamic digital future.

With a wealth of in‑house knowledge, CyberGate Defense is well‑equipped to address the most intricate cybersecurity issues. We strive to make digital transformation secure, accessible, and beneficial, ensuring that organizations throughout the region thrive in an increasingly interconnected digital world.

Job Description

Job Title: SIEM Admin Engineer

Job Description: CyberGate Defense, a leading cybersecurity company, is seeking a SIEM Admin Engineer with 4-6 years of experience to join our team. The successful candidate will be responsible for the administration of SIEM Tools and developing custom parsers.

• Deep knowledge of QRadar/Arcsight; other SIEM technology expertise also helpful.
• Security operations experiences such as incident management, intrusion detection, firewall deployment, and security event analysis.
• Experience with security devices and general IT installations, configuration, and troubleshooting (e.g. Firewall, IDS, etc.).
• Development of custom parsers, Use Cases and fine‑tuning the UseCase based on the inputs from the SOC team.
• Handle day-to-day activities required to achieve and maintain SIEM Operational.
• Perform upgrades on the QRadar/Arcsight SIEM components.
• Deploy new Console, Event Processor, Data Node & Collector as required to collect data feeds.
• Investigate and debug alerts generated in console.
• Review configurations for potential security weaknesses.
• Develop Content including rules, reports, and dashboards.
• Perform QA (Quality Assurance) function on content developed by other parties.
• Health checks that need to be performed on the SIEM.
• Excellent communication and customer interaction skills.