SIEM Integration role
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Gibraltar Technologies seeks a SIEM Integration Engineer to design and maintain SIEM integrations in Dubai. The role involves onboarding log sources, developing parsers and correlation rules, and working with SOC teams.
Key Skills for This Role
Responsibilities
- Integrate and onboard log sources into the SIEM from firewalls, IDS/IPS, EDR/XDR, servers, cloud platforms, IAM, network devices, applications, and databases
- Configure log collection methods such as Syslog, API, agents, connectors, event hubs/message queues
- Develop and maintain parsers, field extractions, log normalization rules, correlation rules, detection use cases, dashboards, and alerts
- Validate data quality, timestamp accuracy, event mapping, and parsing consistency
- Troubleshoot ingestion failures, duplicate logs, missing fields, and performance bottlenecks
- Work closely with SOC analysts, security architects, infra teams, and application owners
- Support incident investigation by ensuring critical telemetry is available in the SIEM
- Optimize log source onboarding for scalability, retention, and compliance requirements
- Tune alerts to reduce false positives and improve detection fidelity
- Document integration procedures, parser logic, onboarding checklists, and operational runbooks
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
- 3 to 7 years of experience in SIEM, SOC, log management, or security engineering
- Strong understanding of SIEM architecture and log flow
- Experience with one or more SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, LogRhythm, or Elastic Security
- Hands on experience with log parsing, regex, JSON/XML log formats, Syslog protocols, REST APIs, and scripting (Python, PowerShell, or Bash)
- Good understanding of MITRE ATT&CK, incident response, detection engineering, and threat monitoring
Full Job Posting
Role Summary
- We are looking for a SIEM Integration Engineer to design, implement, and maintain integrations between enterprise systems and the SIEM platform.
- The role focuses on onboarding log sources, normalizing security events, parsing data, building use cases, and improving threat detection visibility across the environment.
- The ideal candidate should have hands on experience with SIEM tools, log management, security event correlation, API based integrations, and SOC operations.
Key Responsibilities
- Integrate and onboard log sources into the SIEM from firewalls, IDS/IPS, EDR/XDR tools, Windows/Linux servers, cloud platforms, IAM solutions, network devices, applications and databases.
- Configure log collection methods such as Syslog, API, agents, connectors, event hubs/message queues.
- Develop and maintain parsers, field extractions, log normalization rules, correlation rules, detection use cases, dashboards and alerts.
- Validate data quality, timestamp accuracy, event mapping, and parsing consistency.
- Troubleshoot ingestion failures, duplicate logs, missing fields, and performance bottlenecks.
- Work closely with SOC analysts, security architects, infra teams, and application owners.
- Support incident investigation by ensuring critical telemetry is available in the SIEM.
- Optimize log source onboarding for scalability, retention, and compliance requirements.
- Tune alerts to reduce false positives and improve detection fidelity.
- Document integration procedures, parser logic, onboarding checklists, and operational runbooks.
Required Skills
- Strong understanding of SIEM architecture and log flow.
- Experience with one or more SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, LogRhythm, Elastic Security.
- Knowledge of security logs from Windows Event Logs, Linux syslog, firewall logs, proxy logs, Active Directory, cloud audit logs, EDR telemetry.
- Hands on experience with log parsing, regex, JSON/XML log formats, Syslog protocols, REST APIs, scripting using Python, PowerShell, or Bash.
- Good understanding of MITRE ATT&CK, incident response, detection engineering, threat monitoring.
- Familiarity with network and security concepts: TCP/IP, DNS, HTTP/HTTPS, VPN, authentication protocols, IAM concepts.
- Ability to analyze and troubleshoot ingestion and correlation issues.
Preferred Skills
- Experience in cloud SIEM integrations for AWS, Azure, GCP.
- Familiarity with SOAR integration workflows.
- Knowledge of compliance logging requirements such as ISO 27001, PCI DSS, HIPAA, GDPR.
- Experience creating custom detections and use cases.
- Exposure to threat intelligence feed integration.
- Understanding of data retention, storage, and SIEM licensing impact.
Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
- Typically 3 to 7 years of experience in SIEM, SOC, log management, or security engineering.
- Relevant certifications are a plus: Splunk Core/Enterprise Security, Microsoft Sentinel certifications, QRadar certifications.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Gibraltar Technologies LLC
IT Recruiter cum HR Executive
, UAE
Responsible for end-to-end IT recruitment, HR operations, and employee engagement, requiring strong sourcing skills and knowledge of technical roles.
Cybersecurity Proposal & Pre-Sales Specialist
Doha, QAT
Job Summary We are seeking a Cybersecurity Proposal & Pre-Sales Specialist to support the end-to-end development of technical proposals, RFP/RFI/RFQ responses, and tender submis...
Service Desk Analyst
Doha, QAT
he Service Desk Analyst is responsible for providing first-line technical support to end users, managing incidents and service requests, troubleshooting IT issues, and ensuring ...
Head of Fixed Assets & Inventory
Doha, QAT
Gibraltar Technologies LLC seeks a Head of Fixed Assets & Inventory with 20+ years in accounting and 10+ years managerial experience in fixed assets and inventory. The role requires a CA/CPA/CFA/MBA (Finance) and strong
Business Development Manager- Arabic (staffing industry experience)
Dubai, UAE
Job Summary We are looking for a results-driven Business Development Manager with strong experience in IT manpower/ staffing services in the UAE market. The ideal candidate will...
Female Telesales Executive
Dubai, UAE
Gibraltar Technologies LLC is looking for an experienced Female Telesales Executive with a strong background in outbound sales and lead conversion. The role requires achieving sales targets, handling high call volumes, a
Business Development Manager (Manpower – IT Sector)
Dubai, UAE
Job Summary We are looking for a results-driven Business Development Manager with strong experience in IT manpower/ staffing services in the UAE market. The ideal candidate will...
Microsoft Dynamics 365 Technical Consultant
Doha, QAT
Gibraltar Technologies LLC is hiring a Microsoft Dynamics 365 Technical Consultant in Doha, Qatar. The role involves designing, developing, customizing, and supporting D365 solutions, including integrations, workflows, a
IT Recruiter cum HR Executive
, UAE
Cybersecurity Proposal & Pre-Sales Specialist
Doha, QAT
Service Desk Analyst
Doha, QAT
Head of Fixed Assets & Inventory
Doha, QAT
Business Development Manager- Arabic (staffing industry experience)
Dubai, UAE
Female Telesales Executive
Dubai, UAE
Business Development Manager (Manpower – IT Sector)
Dubai, UAE
Microsoft Dynamics 365 Technical Consultant
Doha, QAT