Senior Security Engineer - Splunk, Cribl & Azure Sentinel
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Dautom is seeking a Senior Security Engineer for a client in Dubai. You will administer and integrate Splunk, Cribl, Azure Sentinel, and EDR platforms for security operations. Requires 7+ years of Splunk experience and strong knowledge of security tools.
Key Skills for This Role
Responsibilities
- Administer Splunk and Splunk Apps, develop new or extend existing Apps, integrate Splunk with legacy data sources
- Engage application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations
- Design, implement, and support solutions with Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 ATP, Microsoft Defender ATP
- Implement and administer Microsoft Defender ATP, Azure Cloud Access Security Broker & Azure Threat Protection
- Handle implementation/deployment/support of Nessus scan engines and Tenable Security Center
- Manage CB sensors including deployment, operation, management, maintenance, update, upgrade, patching, and administration
- Create watchlists to detect indicators of compromise (IOCs) and malicious behavior
- Assess customer needs and expectations, design solutions, and implement the design
- Serve as primary responder for Managed Security customer systems, track client configuration issues through resolution
Requirements
- College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment
- Minimum 7 years of professional experience supporting and maintaining SPLUNK SIEM System
- 5 6 years of experience with advanced tuning of Splunk SIEM content
- Experience in Cribl
- Professional experience working with networks and network architecture
- Practical hands on experience in EDR (Carbon Black), Vectra, and Microsoft Azure
- Splunk, Azure Log analytics, or equivalent big data engine experience
- Experience with MS Azure Information Protection and technologies
- Certifications on Splunk Admin, Splunk Architect, Splunk Consultant is a must
- Knowledge of Linux and Windows Operating Systems
Full Job Posting
Client Introduction
- In this role, you will collaborate closely with one of our esteemed clients—a global leader in their industry.
Responsibilities
- Administering Splunk and Splunk Apps to include developing new or extending existing Apps to perform specialized functionality. Integrating Splunk with a wide variety of legacy data sources.
- Engaging application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.
- Design, implement, and support solutions with Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 Advanced Threat Protection (O365 ATP), Microsoft Defender ATP, and their integrations.
- Implement & administer Microsoft Defender (ATP), Azure Cloud Access Security Broker & Azure Threat Protection security products within customer environment.
- Handle the implementation/deployment/support of Nessus scan engines and Tenable Security Center and peripherals with Engineering, SOC, TIU, and IR.
- Maintain local and network credentials, Tenable Security Center, and provisions access to vulnerability scanning systems.
- Integrate Nessus/TSC with other security and IT systems management tools.
- Document vulnerabilities and work on vulnerability mitigation with agreed SLA.
- Managing CB sensors including deployment, operation, management, maintenance, update, upgrade, patching, and administration.
- Should be able to create watchlists to detect indicators of compromise (IOCs) and malicious behavior of new threats.
- Hands on in writing queries in CB to search the desired events.
- Assess customer needs and expectations, design solutions to meet those needs, and then implement the design.
Qualifications & Skills
- College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment.
- Minimum 7 years of professional experience supporting and maintaining SPLUNK SIEM System.
- 5 6 years of experience with advanced tuning of Splunk SIEM content.
- Experience in Cribl.
- Professional experience working with networks and network architecture.
- Information security knowledge in one or more areas such as EDR – Enterprise end point security products.
- Practical hands on experience in EDR (Carbon Black), Vectra, and Microsoft Azure.
- Splunk, Azure Log analytics, or equivalent big data engine experience.
- Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.
- General security knowledge, certificates on Splunk Admin, Splunk Architect, Splunk Consultant is a must. Also, good to have is Azure, Managed vulnerability (Nessus/Tenable), EDR (Carbon Black) and Firewall related security certifications.
- Knowledge of Linux and Windows Operating Systems.
- Experience with various other SIEM security products such as: Splunk, ArcSight, Nitro, or LogRhythm and infrastructure components such as proxies, firewalls, IDS/IPS, and DLP.
Benefits
- Health insurance with one of the leading global providers for medical insurance.
- Career progression and growth through challenging projects and work.
- Employee engagement and wellness campaigns activities throughout the year.
- Excellent learning and development opportunities.
- Annual Flight tickets to home country.
- Inclusive and diverse working environment.
- Flexible/Hybrid working environment.
- Open door policy.
About Dautom
- Dautom is a globally recognized leader in IT consulting and technology services.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Dautom
Data Engineer
Abu Dhabi Emirate, UAE
Dautom is seeking a Data Engineer for a 3-month contract in Abu Dhabi. The role requires strong SQL skills, data engineering foundation including medallion architecture and SCDs, and experience with cloud platforms. Idea
Senior Software Asset Management (SAM)
Sharjah Emirate, UAE
Dautom seeks a Senior Software Asset Manager for a contract role with a global client. You will lead SAM, licensing, and FinOps initiatives, requiring deep vendor licensing expertise and ServiceNow SAM Pro certification.
Lead Generation Executive
Dubai, UAE
Dautom is hiring a Lead Generation Executive in Dubai to identify and generate qualified B2B leads, primarily targeting the Saudi Arabian market. The role involves outbound prospecting, CRM management, and collaborating
Full Stack Engineer
Dubai, UAE
Dautom is hiring a Full Stack Developer for a 3-month extendable contract in Dubai. The role involves developing scalable web applications, building RESTful APIs, optimizing MS SQL databases, and integrating AI/LLM capab
Senior Java Software Engineer
Sharjah, UAE
Dautom is hiring a Senior Java Software Engineer for a contract role with the Sharjah Digital Department. The position involves designing, developing, and maintaining Java-based applications using Spring Boot and Oracle.
Relationship Manager – Financial Institutions
Dubai, UAE
Dautom seeks a Relationship Manager to build and maintain relationships with correspondent banks, manage nostro/vostro accounts, and support KYC processes. Ideal candidates have 2-3 years of experience in financial insti
Dotnet Developer
Dubai, UAE
Dautom is looking for an experienced Dotnet Developer with 6+ years of experience to analyze requirements, design databases, develop applications and Web APIs independently. Requires strong skills in C#, ASP.NET, SQL Ser
Data Modeler
Abu Dhabi, UAE
Dautom is hiring a Data Modeler for a contract role in Abu Dhabi. You will design enterprise data models, build ETL pipelines, and implement data quality measures using the Informatica stack and cloud technologies.
Data Engineer
Abu Dhabi Emirate, UAE
Senior Software Asset Management (SAM)
Sharjah Emirate, UAE
Lead Generation Executive
Dubai, UAE
Full Stack Engineer
Dubai, UAE
Senior Java Software Engineer
Sharjah, UAE
Relationship Manager – Financial Institutions
Dubai, UAE
Dotnet Developer
Dubai, UAE
Data Modeler
Abu Dhabi, UAE