SIEM Engineer

Madre Integrated Engineering; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

Madre Integrated Engineering in Doha is seeking a senior SIEM Engineer to design, deploy, and manage enterprise SIEM solutions across multiple platforms such as Splunk, QRadar, ArcSight, and LogRhythm.

You will lead log source integration, build parsers, tune detection rules, and collaborate with SOC and IR teams to improve incident response. Proficiency in Python or PowerShell for automation and reporting is required.

Qualifications

• Bachelor’s degree required in CS/IT or related field.
• 8+ years of experience in SIEM engineering, security monitoring, or SOC environments.
• Strong knowledge of SIEM platforms and log management.

Responsibilities

• SIEM implementation, deployment, and ongoing management across platforms.
• Log source integration, parsers development, and rule tuning for accurate detection.
• Create, test, and optimize detection rules, correlation logic, and alerts.
• Collaborate with SOC and Incident Response teams to enhance workflows and investigations.
• Automation and scripting using Python/PowerShell for automation, dashboards, and custom reporting.
• Improve threat visibility and proactive detection coverage.
• Maintain technical documentation, playbooks, and compliance reports.

Skills

Python

PowerShell

SIEM expertise

Threat detection

Education

Bachelor’s degree in Computer Science/IT

Tools

Splunk

QRadar

ArcSight

LogRhythm

Job description

Madre Integrated Engineering | Full time

• SIEM Implementation & Management : Deploy, configure, and maintain SIEM platforms (Splunk, QRadar, ArcSight, LogRhythm).
• Log Source Integration : Integrate diverse log sources, develop custom parsers, and tune rules for accurate detection.
• Detection Rules : Create, test, and optimize detection rules, correlation logic, and alerts based on threat models and business risks.
• Collaboration : Work closely with SOC and Incident Response teams to enhance investigative workflows.
• Automation & Scripting : Use Python, PowerShell, or similar scripting languages for automation, dashboard creation, and custom reporting.
• Threat Visibility : Improve monitoring coverage and ensure proactive detection of advanced threats.
• Documentation : Maintain technical documentation, detection playbooks, and compliance reports.

Requirements

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related discipline.
• Minimum 8+ years of experience in SIEM engineering, security monitoring, or SOC environments.
• Strong knowledge of SIEM platforms and log management.

Certifications

• Splunk Certified Architect.
• GCIA (GIAC Certified Intrusion Analyst).
• Equivalent SIEM/security certifications.