Senior Security Operations Engineer (SIEM/SOAR) | SRIT Group | UAE

Tech Junction Ltd; Asia; On-site; PEN 281,000 - 514,000; Full time

Job summary

SRIT Group in the UAE seeks a Senior Security Operations Engineer with 5–10 years of cybersecurity and SIEM experience. You will own security monitoring, SIEM engineering, log management, and incident automation workflows on-site.

You will architect QRadar and Sentinel deployments, craft KQL/AQL queries, develop SOAR playbooks, and integrate Defender XDR and Entra ID across cloud and on‑prem environments. Strong scripting in PowerShell and Python is essential.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT, or related field.
• 5–10 years of progressive experience in cybersecurity, security operations or SIEM engineering.
• Hands-on QRadar and Microsoft Sentinel administration and tuning.
• Proficient in KQL, AQL, log management, and detection rule engineering.
• Experience building SOAR playbooks and automated incident response.
• Familiarity with MITRE ATT&CK, Azure security, Defender XDR, and Entra ID.
• Strong scripting in PowerShell and Python for automation.
• Excellent English communication and stakeholder collaboration.
• On-site availability for full-time UAE operations.

Responsibilities

• Lead security operations, monitor incidents, and manage SIEM platforms.
• Architect, deploy, and tune QRadar and Sentinel deployments.
• Write and optimize KQL and AQL queries and detection rules.
• Develop automated SOAR playbooks for rapid containment.
• Integrate Defender XDR, Entra ID, and multi-cloud telemetry.
• Create custom automation scripts and data connectors.
• Drive QRadar‑to‑Sentinel migration and integration initiatives.
• Maintain runbooks, technical docs, and incident reports.

Skills

QRadar

Sentinel

KQL

AQL

SOAR

PowerShell

Python

Threat hunting

Cloud security

English comms

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Defender XDR

Entra ID

Azure Cloud

Job description

Position Summary:

SRIT Group is actively seeking an experienced, high-caliber, and technical Senior Security Operations Engineer with 5 to 10 years of progressive professional experience in cybersecurity, security operations, and SIEM engineering to join our team on a full-time permanent on-site basis in the UAE. In this critical cybersecurity role, you will be responsible for leading security operations, managing enterprise SIEM platforms, building advanced SOAR playbooks, and ensuring robust threat detection across cloud and on-premises environments. You will leverage your deep specialist expertise in IBM QRadar, Microsoft Sentinel, KQL, AQL, and security automation to deliver uncompromised threat intelligence, rapid incident response, and operational excellence. This opportunity offers competitive compensation, executive technical visibility, and exceptional career growth prospects within a premier global technology and security solutions enterprise.

Detailed Job Description:

As a Senior Security Operations Engineer supporting SRIT Group in the UAE, you will take full operational, tactical, and technical ownership of security monitoring, SIEM engineering, log management, and incident automation workflows. Your day-to-day responsibilities include architecting and maintaining IBM QRadar and Microsoft Sentinel deployments, writing optimized KQL and AQL queries, developing and tuning advanced detection rules, building automated SOAR playbooks for rapid threat containment, leveraging Microsoft Defender XDR and Microsoft Entra ID for identity and endpoint security, scripting custom automation using PowerShell and Python, participating in QRadar-to-Sentinel migration initiatives, and collaborating with cross-functional IT and banking/financial services security squads. You will utilize your proactive troubleshooting and analytical problem-solving skills to resolve complex security anomalies under strict operational service level agreements.

Key Responsibilities:

• Architect, configure, manage, and optimize enterprise SIEM platforms including IBM QRadar and Microsoft Sentinel.
• Write, test, and tune advanced KQL and AQL queries, log parsing rules, and real-time threat detection use cases.
• Build, deploy, and maintain automated SOAR playbooks and security orchestration workflows to streamline incident response.
• Integrate and monitor Microsoft Defender XDR, Microsoft Entra ID, and multi-cloud security telemetry across infrastructure.
• Develop custom automation scripts and data connectors using PowerShell and Python scripting languages.
• Execute comprehensive log management, threat hunting, and QRadar-to-Sentinel migration and integration projects.
• Collaborate seamlessly with cross-functional security operations centers (SOC), IT infrastructure, and compliance squads.
• Maintain comprehensive technical documentation of security architecture, runbooks, detection engineering logs, and incident reports.

Required Qualifications & Skills:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical discipline.
• Minimum of 5 to 10 years of progressive professional experience in cybersecurity, security operations, or SIEM engineering.
• Strong, demonstrable hands‑on professional expertise in IBM QRadar and Microsoft Sentinel administration and tuning.
• Comprehensive working knowledge of KQL, AQL, log management principles, and advanced detection rule engineering.
• Solid practical experience building SOAR playbooks, automated incident response workflows, and security orchestration.
• Working knowledge of MITRE ATT&CK framework, Azure cloud security, Microsoft Defender XDR, and Microsoft Entra ID.
• Proficient coding and scripting capabilities utilizing PowerShell and Python for security automation.
• Exceptional analytical, troubleshooting, debugging, and problem-solving capabilities under high‑pressure incident conditions.
• Excellent written and verbal English communication skills with strong stakeholder collaboration and coordination abilities.
• Mandatory legal work eligibility and physical availability for full-time on‑site operations in the UAE.

Nice-to-Have Skills:

• Professional cybersecurity certifications such as CISSP, CISM, Certified Ethical Hacker (CEH), or Microsoft Certified: Security Operations Analyst.
• Prior professional working experience in banking, financial services, or highly regulated enterprise security environments.
• Direct, hands‑on experience executing complex QRadar-to-Sentinel migration projects.
• Advanced understanding of zero trust architecture, threat intelligence platforms, and container security.

Application Information:

• Recruiter: SRIT Group Talent Acquisition Division
• Contact Name: Anisree S (Technical Recruitment Specialist)
• Email: [e-mail]
• Phone:
• Company Website: https://www.sritgroup.com
• Salary/Rate: Market Competitive / Enterprise Security Package
• Deadline: Open until filled (Urgent UAE On-Site Opening)
• Notice Period: Immediate to 30 Days Preferred
• Contract Duration: Permanent / Full-Time On-Site Engagement (UAE)

Recruitment Pro Tip:

When applying for this Senior Security Operations Engineer position at SRIT Group, ensure your resume explicitly highlights your IBM QRadar, Microsoft Sentinel, and SOAR automation portfolio, and prominently features any banking sector experience or QRadar-to-Sentinel migration projects.