Lead SOC Engineer (SIEM)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Lead Splunk SIEM management services, architect solutions, enhance telemetry, and collaborate on detection use cases in a SOC environment.
Key Skills for This Role
Full Job Posting
Key Responsibilities
- Deliver and Lead Splunk SIEM management services within the SOC environment.
- Architect scalable and resilient Splunk-based SIEM solutions.
- Define data ingestion strategies, parsing logic, and correlation rules.
- Collaborate with the asset owner, client stakeholder, and SOC, in onboarding new log sources to the SIEM platform.
- Maintain and govern SOC critical log sources, ensuring their proper functionality and integration with Splunk SIEM.
- Detect log source issues, coordinate with customers to diagnose and resolve them in a timely manner.
- Enhance and optimize telemetry within the Splunk environment to improve data collection, correlation, and reporting.
- Collaborate with SOC and threat intelligence teams to develop detection use cases.
- Implement dashboards, alerts, and reports for proactive threat monitoring.
- Perform regular system updates to ensure Splunk functionality and security are up to date.
- Resolve Splunk-related issues promptly and efficiently.
- Proficiency in field extractions, data normalization, and CIM (Common Information Model) compliance.
- Maintain the performance of the Splunk SIEM according to established best practices.
- Participate in continuous process improvements to increase SOC efficiency and effectiveness.
- Provide regular and accurate reports on Splunk services and SOC operations to relevant stakeholders.
- Contribute to SOC architecture strategy and implementation initiatives related to Splunk in the pre-sales phase when required.
- Plan and execute Splunk version upgrades and feature rollouts.
- Evaluate and deploy new Splunk apps and add-ons.
Characterstics
- Profound knowledge and hands-on experience with Splunk SIEM and other related technologies like CRIBL.
- Understanding of SOC workflows, MITRE ATT&CK framework, and threat detection methodologies.
- Ability to correlate data across multiple sources to identify patterns and anomalies.
- Strong understanding of cloud and network technologies, essential for efficient log source onboarding.
- Proven technical capabilities in a complex, fast-paced SOC environment.
- Ability to diagnose and troubleshoot log source issues related to cloud and network infrastructures.
- Strong understanding of SOC operations, cybersecurity principles, and best practices.
- Excellent problem-solving skills and the ability to make decisions under pressure.
- Ability to collaborate effectively with a variety of team members, including interfacing with customers to resolve issues.
- High proficiency in written and verbal communication
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Group 42
Manager - OT Cybersecurity (CPX)
Abu Dhabi, UAE
Develop and implement cybersecurity strategies for OT/IoT/IIoT, conduct risk assessments, and provide technical expertise in industrial control systems.
Lead Specialist - Account Management (CPX)
United Arab Emirates, UAE
Responsible for business development, sales management, and client consulting, requiring strong negotiation skills and technical competence in cybersecurity.
Senior Scientist - Speech and Language
United Arab Emirates, UAE
Conduct research in speech and audio technologies, develop algorithms using machine learning, and collaborate with teams to enhance real-world applications.
DevOps Engineer
Dubai, UAE
Design, build, and maintain CI/CD pipelines (GitHub Actions) for microservices (Python / Go / Java / Kotlin / TypeScript) and Unity applications Implement pipeline templates and...
Senior Character Rigger
United Arab Emirates, UAE
We are seeking a hands-on, production-proven Senior Character Rigger to join Analog as an individual contributor. This is a rigging-focused role, centered on building high-quali...
Associate - Financial Accounting (Space42)
Abu Dhabi, UAE
Key Accountabilities Maintain and manage general ledger accounts and ensure timely and accurate month-end and year-end closings using Oracle Fusion. Good knowledge in performing...
Senior Android Developer
Dubai, UAE
Design and develop advanced Android applications, collaborate with teams, optimize performance, and ensure quality using Kotlin or Java programming languages.
Growth Associate
Abu Dhabi, UAE
Strategic & Business Planning Develop detailed business plans for new initiatives and existing programs including strategic presentations (PowerPoint) and financial models (Exce...
Manager - OT Cybersecurity (CPX)
Abu Dhabi, UAE
Lead Specialist - Account Management (CPX)
United Arab Emirates, UAE
Senior Scientist - Speech and Language
United Arab Emirates, UAE
DevOps Engineer
Dubai, UAE
Senior Character Rigger
United Arab Emirates, UAE
Associate - Financial Accounting (Space42)
Abu Dhabi, UAE
Senior Android Developer
Dubai, UAE
Growth Associate
Abu Dhabi, UAE