SOC SIEM Engineer | Splunk & Cribl Specialist

CPX; Abu Dhabi; On-site; AED 180,000 - 320,000; Full time

Job summary

CPX in Abu Dhabi seeks an experienced SOC Engineer, SIEM, with a focus on Splunk and Cribl, to support SIEM management services within the SOC. You will collaborate with the SOC Engineering team, onboarding log sources and ensuring SIEM health checks for analysts and customers.

The role requires 6+ years in SOC operations, strong scripting (Python), and solid cloud/network knowledge to enable efficient log source onboarding and telemetry optimization.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 6+ years of SOC operations experience.
• Experience with Splunk SIEM management and Cribl.

Responsibilities

• Assist in delivering SIEM management services within the SOC.
• Support the SIEM Engineering team in resolving common SIEM issues.
• Be the first point of contact for queries from analysts or customers on log sources and SIEM health checks.
• Assist onboarding of new log sources to the SIEM platform.
• Participate in telemetry enhancements within the Splunk environment.
• Support regular system updates to maintain Splunk functionality and security.
• Maintain performance of the Splunk/Sentinel SIEM per best practices.
• Contribute to SOC efficiency through continuous process improvements.
• Provide regular reports on Splunk services and SOC operations.
• Contribute to SOC architecture strategy and Splunk-related initiatives.

Skills

SIEM operations

Python scripting

Cloud & networking

SOC tuning & health checks

Troubleshooting

Communication

Collaboration

Documentation

Education

Bachelor's degree in CS/IT/C Cybersecurity

Tools

Splunk

QRadar

Sentinel

LogRhythm

Cribl

Cribl Admin

Job description

CPX in Abu Dhabi seeks an experienced SOC Engineer, SIEM, with a focus on Splunk and Cribl, to support SIEM management services within the SOC. You will collaborate with the SOC Engineering team, onboarding log sources and ensuring SIEM health checks for analysts and customers.

The role requires 6+ years in SOC operations, strong scripting (Python), and solid cloud/network knowledge to enable efficient log source onboarding and telemetry optimization.