Security Engineer (DE & Integration)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Help AG is looking for a Security Engineer (DE & Integration) to manage onboarding, SIEM infrastructure, detection content, and integration of security solutions. The role requires 6+ years of experience, Splunk expertise, and relevant certifications.
Key Skills for This Role
Responsibilities
- Manage and onboard Azure M365 Suite and Microsoft Cloud Security solutions
- Deploy and manage SIEM Infrastructure – Splunk & Sentinel (MUST)
- Deploy and manage Cribl Infrastructure – Stream, Edge and Search Deployments
- Deploy and manage Vulnerability Management solutions (Tenable, MDVM) & NDR
- Integrate various data sources into SIEM – Splunk, Sentinel, LogRhythm & Securonix
- Implement and maintain detection capabilities across SIEM and EDR/XDR platforms
- Evaluate existing EDR/SIEM content to determine which content should be removed or updated to improve fidelity
- Leverage the MITRE ATT&CK framework, monitor the threat landscape, and evaluate existing data sources to identify opportunities for new content development
- Research and innovate new mitigation, detection, and response capabilities
- Support the onboarding of new data sources by developing relevant EDR/SIEM content
- Develop EDR/SIEM detection use cases and review with relevant stakeholders
- Develop and maintain content catalog, including mapping to the MITRE ATT&CK framework
Requirements
- College degree or equivalent training with experience working in a Security Operations Center and/or Managed Security
- Minimum 6 years of professional experience supporting and maintaining threat content and SPLUNK SIEM System is mandatory
- Microsoft Security certifications (SC 200, SC 300, AZ 500)
- Splunk certifications (Splunk Certified Architect / Admin)
- GIAC (GCDA, GCIA, GCIH) or equivalent advanced security certifications
- Experience and knowledge of SIEM is essential
- Professional experience working with networks and network architecture
- Information security knowledge in one or more areas such as EDR, enterprise end point security products
- Practical hands on experience in EDR (Carbon Black), Vectra, and Microsoft Azure
- Splunk, Azure Log analytics, or equivalent big data engine experience
- Experience with MS Azure Information Protection and technologies
- Knowledge of Linux and Windows Operating Systems
Full Job Posting
Role Overview
- Help AG is looking for a Security Engineer (DE & Integration) who will be responsible for the creation of procedures, implementation of process development, onboarding customers to MSS, and maintenance of threat content across internal and client environments. The Engineer will work closely with Man
Responsibilities
- Manage and onboard Azure M365 Suite and Microsoft Cloud Security solutions.
- Deploy, and manage SIEM Infrastructure – Splunk & Sentinel (MUST).
- Deploy, and manage Cribl Infrastructure – Stream, Edge and Search Deployments.
- Deploy, and manage Vulnerability Management solutions ( Tenable, MDVM) & NDR.
- Integrate various data sources into SIEM – Splunk, Sentinel, LogRhythm & Securonix.
- Implement and maintain detection capabilities across SIEM and EDR/XDR platforms.
- Evaluate existing EDR/SIEM content to determine which content should be removed or updated to improve fidelity.
- Leverage the MITRE ATT&CK framework, monitor the threat landscape, and evaluate existing data sources to identify opportunities for new content development for detection and response.
- Research and innovate new mitigation, detection, and response capabilities given input from industry trends, customer feedback, and personal research.
- Support the onboarding of new data sources by developing relevant EDR/SIEM content.
- Develop EDR/SIEM detection uses cases and review with relevant stakeholders, such as engineers, and others.
- Develop and maintain content catalog, including mapping to the MITRE ATT&CK framework, to improve the efficiency of deploying the security stack to new environments.
Qualification & Skills
- College degree or equivalent training with experience working in a Security Operations Center and/or Managed Security.
- Minimum 6 years of professional experience supporting and maintaining threat content and as well as SPLUNK SIEM System is mandatory.
- Microsoft Security certifications (SC 200, SC 300, AZ 500)
- Splunk certifications (Splunk Certified Architect / Admin)
- GIAC (GCDA, GCIA, GCIH) or equivalent advanced security certifications.
- Experience and knowledge of SIEM is essential.
- Professional experience working with networks and networks architecture.
- Information security knowledge in one or more areas such as EDR – Enterprise end point security products (e.g., McAfee e Policy Orchestrator, Virus Scan, Anti Spyware, Host Data Loss Protection, Endpoint Encryption, etc.)
- Practical hands on experience in EDR (Carbon Black), Vectra, and Microsoft Azure.
- Splunk, Azure Log analytics, or equivalent big data engine experience.
- Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.
- General security knowledge, certificates in Splunk Admin, Splunk Architect, Splunk Consultant is a must. Also, good to have Azure, Managed vulnerability (Nessus/Tenable), EDR (Carbon Black) and Firewall related security certifications.
Benefits
- Health insurance with one of the leading global providers for medical insurance.
- Career progression and growth through challenging projects and work.
- Employee engagement and wellness campaigns activities throughout the year.
- Annual Flight tickets to home country.
- Excellent learning and development opportunities.
- Flexible/Hybrid working environment.
- Inclusive and diverse working environment.
- Open door policy
About Us
- Help AG is the cybersecurity arm of e& enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabl
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Help AG, an e& enterprise company
Cybersecurity Specialist (Database Activity Monitoring)
Riyadh, KSA
Help AG is seeking a Cybersecurity Specialist to manage and optimize Imperva Database Activity Monitoring (DAM) for a client in Riyadh. The role involves deploying agents, tuning policies, integrating with SIEM, and ensu
Senior Infrastructure Engineer
Dubai, UAE
Help AG is seeking a Senior Infrastructure Engineer to maintain MSS infrastructure including Windows/Linux servers, switches, firewalls, and cloud environments. The role involves health management, troubleshooting, patch
Associate Cybersecurity Defense Analyst
Riyadh, KSA
Help AG is looking for a talented Associate Cybersecurity Defense Analyst to join their SOC team. The role involves monitoring security technologies and events using SIEM tools to detect and identify cybersecurity incide
Associate Cybersecurity Defense Analyst
Riyadh, KSA
Help AG is hiring an Associate Cybersecurity Defense Analyst for its SOC team. The role involves monitoring security technologies and events using SIEM tools to detect and identify cybersecurity incidents. Candidates nee
IT Support Technician
Dubai, UAE
Help AG is seeking an IT Support Technician to maintain infrastructure and support employees. The role involves endpoint support, user onboarding, and infrastructure monitoring. Requires 1+ years of IT support experience
Offensive Cybersecurity Consultant
Dubai, UAE
Help AG is hiring an Offensive Security Consultant to perform vulnerability assessments, penetration testing, red teaming, and security research. Candidates need 3-4 years of experience, OSCP/OSCE certification, and stro
Security Consultant - Integration
Abu Dhabi, UAE
Help AG seeks an experienced Security Consultant for post-sales integration and pre-sales activities. The role involves deploying security solutions, leading projects, designing architectures, and delivering proof of con
Cyber Automation Intern
Dubai, UAE
Help AG is seeking a Cyber Automation Intern to contribute to Automation & AI initiatives within the Cyber Automation Team. The intern will work on tools like FortiSOAR, Python, AI/ML models, and APIs to automate MSS ope
Cybersecurity Specialist (Database Activity Monitoring)
Riyadh, KSA
Senior Infrastructure Engineer
Dubai, UAE
Associate Cybersecurity Defense Analyst
Riyadh, KSA
Associate Cybersecurity Defense Analyst
Riyadh, KSA
IT Support Technician
Dubai, UAE
Offensive Cybersecurity Consultant
Dubai, UAE
Security Consultant - Integration
Abu Dhabi, UAE
Cyber Automation Intern
Dubai, UAE