SOC SIEM Engineer - Splunk & Cribl Health & Onboarding

CPX; Abu Dhabi; On-site; AED 120,000 - 180,000; Full time

Job summary

CPX is seeking a SOC Engineer specializing in SIEM management to support SOC Operations. You will work with SOC Engineering, acting as first point of contact for analyst queries, focusing on log sources and SIEM health checks.

The role requires a minimum of 6 years in SOC operations, SIEM experience with Splunk and Cribl, and certifications. You’ll onboard log sources, optimize telemetry, and contribute to SOC architecture and regular reporting.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• Minimum 6 years of experience in SOC operations with Splunk SIEM management and Cribl.
• Prior experience in a technical role within a SOC or similar cybersecurity environment.

Responsibilities

• Assist in delivering SIEM management services within the SOC.
• Support the SIEM Engineering team in managing and resolving common SIEM issues.
• Act as a first point of contact for queries and issues from the analyst team or customers, particularly relating to log source and SIEM health checks.
• Assist in onboarding of new log sources to the SIEM platform.
• Participate in enhancing and optimizing telemetry within the Splunk environment.
• Support regular system updates to maintain Splunk functionality and security.
• Contribute to maintaining the performance of the Splunk/Sentinel SIEM according to established best practices.
• Assist in continuous process improvements to increase SOC efficiency and effectiveness.
• Provide regular reports on Splunk services and SOC operations as required.
• Contribute to SOC architecture strategy and implementation initiatives related to Splunk.

Skills

SIEM platforms

Python scripting

Cloud & network knowledge

SOC operations experience

Troubleshooting

Communication

Education

Bachelor’s degree in computer science / IT / Cybersecurity

Tools

Splunk

Cribl

Azure SC-200

Cribl Admin

QRadar

Job description

CPX is seeking a SOC Engineer specializing in SIEM management to support SOC Operations. You will work with SOC Engineering, acting as first point of contact for analyst queries, focusing on log sources and SIEM health checks.

The role requires a minimum of 6 years in SOC operations, SIEM experience with Splunk and Cribl, and certifications. You’ll onboard log sources, optimize telemetry, and contribute to SOC architecture and regular reporting.