SIEM Expert

SIEM Expert / Splunk & SOAR Expert*

Job Overview

We are looking for an experienced *SIEM Expert* to join our cybersecurity team. The ideal candidate will have strong hands-on experience with *Splunk Enterprise Security (ES)* and *Phantom SOAR*, with expertise in security monitoring, alert management, incident response, and security automation.

The candidate will be responsible for configuring and managing security use cases, developing alerts, integrating security tools, and automating security operations.

Key Responsibilities

* Configure, manage, and optimize *Splunk Enterprise Security* for security monitoring and threat detection.

* Develop, implement, and manage *security use cases and alerts*.

* Monitor and analyze security events to identify potential threats and suspicious activities.

* Support *incident detection, investigation, and response* activities.

* Configure and manage *Phantom SOAR* for security automation and orchestration.

* Develop automated workflows/playbooks to improve incident response and reduce manual effort.

* Integrate Splunk and SOAR platforms with other security tools and systems.

* Create and maintain security dashboards, alerts, and monitoring processes.

* Use *Python, PowerShell, or similar scripting languages* for automation and customization.

* Troubleshoot security monitoring and automation issues.

* Work closely with cybersecurity, infrastructure, network, and other technical teams.

* Maintain clear technical documentation related to security use cases, configurations, and processes.

Required Skills & Experience

* Strong hands-on experience with *Splunk Enterprise Security (ES)*.

* Experience with *Phantom SOAR* or other SOAR platforms.

* Experience in implementing and managing *security use cases and alerts*.

* Strong understanding of *Security Operations (SOC)* and *Incident Response* processes.

* Good knowledge of SIEM concepts, security monitoring, and threat detection.

* Strong scripting/automation skills using *Python, PowerShell, or similar languages*.

* Experience integrating security tools and platforms.

* Strong analytical and troubleshooting skills.

* Good communication and collaboration skills.

Preferred Certifications

* *Splunk Certified Admin*

* *Splunk Enterprise Security Certified Admin*

* Relevant certifications in:

* Security Operations

* Incident Response

* SIEM

* SOAR

Education

*Bachelor's degree or higher* in Computer Science, Information Technology, Cybersecurity, or a related field is preferred.

Pay: AED5,000.00 - AED10,000.00 per month

Work Location: In person