Senior SOC Engineer SIEM

Overview

Job Description

We are seeking a skilled Senior SOC Engineer with expertise in SOAR platforms to drive automation and efficiency in our Security Operations Center. The role involves designing and optimizing SOAR workflows to improve incident response, integrate threat intelligence, and scale operations. Collaboration with cross-functional teams is essential to implement effective automation across cybersecurity processes.

Responsibilities

• Manage and maintain SOAR services within the SOC environment.
• Hands-on experience with platforms like Splunk SOAR, FortiSOAR, or Cortex XSOAR.
• Onboard new log sources and integrations into SOAR in collaboration with SOC and stakeholders.
• Ensure proper functionality and integration of critical log sources with SIEM/SOAR.
• Design and implement SOAR playbooks and workflows for automation and incident response.
• Integrate SOAR with SIEM, threat intelligence, ticketing systems, and other security tools.
• Work with SOC analysts to streamline triage, investigation, and remediation processes.
• Maintain and update SOAR components; monitor performance and troubleshoot issues.
• Develop custom scripts and connectors to enhance automation capabilities.
• Continuously refine playbooks based on evolving threats and feedback.
• Document workflows, integrations, and operational procedures.
• Ensure compliance with internal policies and regulatory requirements.
• Support process improvements to increase SOC efficiency and effectiveness.
• Profound knowledge and hands-on experience with Splunk SOAR and other related SOC Technologies like SIEM, EDR, NDR amongst others.
• Understanding of SOC workflows, MITRE ATT&CK framework, and threat detection methodologies.
• Ability to correlate data across multiple sources to identify patterns and anomalies.
• Strong understanding of cloud and network technologies, essential for efficient log source onboarding.
• Proven technical capabilities in a complex, fast-paced SOC environment.
• Ability to diagnose and troubleshoot log source issues related to cloud and network infrastructures.
• Strong understanding of SOC operations, cybersecurity principles, and best practices.
  
  

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• Experience with platforms like Forti SOAR, Splunk SOAR, Cortex XSOAR etc.
• Vendor Certifications and training for SOAR tools.
• Python scripting skills.
• Cloud-related certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert.
• Certified Information Systems Security Professional (CISSP), GIAC is preferred.
• Automation and Orchestration of cyber incident with accuracy and consistency.
• A minimum of 5 years of experience in SOC operations, with significant experience in SOAR management.
• Prior experience in a technical role within a SOC or similar cybersecurity environment.
  
  

Job Details

Role Level: Mid-Level Work Type: Full-Time Country: United Arab Emirates City: Abu Dhabi Company Website: https://cpx.net/ Job Function: Information Technology (IT) Company Industry/

Sector: Computer and Network Security

What We Offer

About The Company

Searching, interviewing and hiring are all part of the professional life. The TALENTMATE Portal idea is to fill and help professionals doing one of them by bringing together the requisites under One Roof. Whether you're hunting for your Next Job Opportunity or Looking for Potential Employers, we're here to lend you a Helping Hand.

Report

Disclaimer: talentmate.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [email protected].