Lead SOC Engineer (SIEM & SOAR), Group 42 (G42)

Job Description

The Lead SOC Engineer (SIEM & SOAR) at  Group 42 (G42) plays a critical role in managing and optimizing Security Operations Center (SOC) services. This position focuses on Splunk SIEM and SOAR platforms, ensuring efficient log management, automation, and orchestration. The role requires strong cybersecurity expertise, collaboration with internal and external teams, and the ability to enhance system performance, security posture, and incident response capabilities.

Job ID: 1714

Date Posted: NA

Expiration Date: NA

Qualification: Bachelor’s Degree (Certifications preferred)

Apply: Click Here

Main Duties

• Deliver SIEM and SOAR management services using Splunk within SOC environments effectively.
• Collaborate with stakeholders to onboard and integrate new log sources efficiently.
• Maintain log source integrity ensuring proper functionality and seamless system integration always.
• Identify and resolve log related issues across cloud and network infrastructures quickly.
• Develop and implement SOAR playbooks to automate incident response workflows effectively.

Essential Qualifications

• Bachelor’s degree in Computer Science Cybersecurity Information Technology or related field required.
• Minimum eight years experience in SOC operations and Splunk SIEM management required.
• Hands on expertise with Splunk SIEM SOAR and related technologies required.
• Strong knowledge of SOC workflows MITRE ATTACK framework and threat detection techniques.
• Advanced proficiency in SPL for queries dashboards and reporting development required.

Preferred Qualifications

• Splunk Certified Architect or Splunk Certified Administrator certification is strongly preferred here.
• Experience with SOAR platforms like Splunk SOAR Forti SOAR Cortex XSOAR required.
• Cloud certifications such as AWS Azure or Google Cloud Architect credentials preferred.
• Cybersecurity certifications like CISSP or GIAC are highly preferred qualifications here.
• Networking certifications including CCNA or CCNP are considered advantageous for candidates