SOC SIEM Engineer (Splunk/Cribl) — Growth & Impact

Showcify, Inc.; Abu Dhabi; Vor Ort; AED 180.000 - 240.000; Vollzeit

Zusammenfassung

Showcify, Inc. is seeking a SOC Engineer focused on SIEM management within a Security Operations Center.

The role acts as a first point of contact for analysts and customers, with emphasis on log sources and SIEM health checks, and collaborates with the SIEM Engineering team to on-board new data sources and optimize telemetry. The ideal candidate has over 6 years in SOC operations, familiar with Splunk and Cribl, and holds relevant SIEM certifications.

Qualifikationen

• Bachelor’s degree in CS, IT, cybersecurity, or related field.
• Minimum 6 years of SOC operations experience with Splunk SIEM management and Cribl.
• Experience in a technical role within SOC or similar cybersecurity environment.
• Strong troubleshooting and problem-solving in fast-paced SOC.
• Excellent written and verbal communication.

Aufgaben

• Deliver SIEM management services within the SOC.
• Support the SIEM Engineering team and resolve common SIEM issues.
• Serve as first point of contact for analyst/customer queries on log source and SIEM health.
• Onboard new log sources to the SIEM platform.
• Enhance telemetry within the Splunk environment.
• Maintain Splunk and Sentinel functionality and security.
• Contribute to SOC architecture strategy related to Splunk.
• Provide regular reports on Splunk services and SOC operations.
• Pursue continuous process improvements to increase SOC efficiency.

Kenntnisse

SIEM experience

Splunk

QRadar

Sentinel

LogRhythm

Cribl

Python scripting

Cloud technologies

Network technologies

SOC operations

Communication

Ausbildung

Bachelor’s degree in CS/IT/Cybersecurity

Splunk Certified Admin

Azure SC-200

Cribl Admin

AWS Certified Cloud Practitioner

Google Associate Cloud Engineer

Microsoft Certified: Azure Fundamentals

CCNA

Tools

Splunk

QRadar

Sentinel

LogRhythm

FortiSIEM

Cribl

Jobbeschreibung

Showcify, Inc. is seeking a SOC Engineer focused on SIEM management within a Security Operations Center.

The role acts as a first point of contact for analysts and customers, with emphasis on log sources and SIEM health checks, and collaborates with the SIEM Engineering team to on-board new data sources and optimize telemetry. The ideal candidate has over 6 years in SOC operations, familiar with Splunk and Cribl, and holds relevant SIEM certifications.