SOC L1 Analyst: SIEM Onboarding & Triage

Talents of Endearment; Dubai; On-site; AED 100,000 - 167,000; Full time

Benefits offered by this job

Career growth potential

Emirati talent development program

Hands-on SIEM exposure

Job summary

Talents of Endearment is seeking a SOC L1 Analyst (SIEM Integration Focus) in Dubai to monitor real-time security, validate log ingestion, and perform first-level incident triage. This Emirati-national role supports national workforce development and compliance requirements.

You will onboard log sources, maintain parsers and detection use cases, and coordinate with SOC teams to ensure telemetry for investigations.

Qualifications

• Understanding of SIEM architecture and log flow.
• Experience with log types: Windows, Linux, firewall, cloud audit logs.

Responsibilities

• Monitor SIEM dashboards, alerts, and rules for potential incidents.
• Validate log ingestion from various sources including firewalls, EDR/XDR, servers, cloud platforms, IAM, and network devices.
• Assist in onboarding new log sources using Syslog, API, agents, connectors, and event hubs.
• Maintain parsers, field extractions, normalization rules, and basic detection use cases.
• Perform first-level triage: classify alerts, elevate incidents, and document findings.
• Troubleshoot ingestion issues like missing fields, timestamp errors, duplicates, and parsing failures.
• Coordinate with SOC L2/L3, security architects, and infra teams for issue resolution.
• Ensure critical telemetry is available for investigations and threat monitoring.
• Maintain documentation for integration procedures, onboarding checklists, and runbooks.

Skills

SIEM architecture

Log ingestion troubleshooting

Incident triage

TCP/IP/DNS/HTTP knowledge

Regex/JSON/XML parsing

Security concepts MITRE ATT&CK

On-call collaboration

Cloud logs familiarity

Education

Bachelor’s degree in CS/Cybersecurity/IT

Tools

Microsoft Sentinel

Splunk

QRadar

ArcSight

Elastic Security

Job description

Talents of Endearment is seeking a SOC L1 Analyst (SIEM Integration Focus) in Dubai to monitor real-time security, validate log ingestion, and perform first-level incident triage. This Emirati-national role supports national workforce development and compliance requirements.

You will onboard log sources, maintain parsers and detection use cases, and coordinate with SOC teams to ensure telemetry for investigations.