Senior Security Engineer

Responsibilities

• Administer Splunk and Splunk Apps, including developing new or extending existing apps and integrating legacy data sources.
• Design, implement, and support Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 ATP, and Microsoft Defender ATP.
• Manage and oversee day-to-day activities of the Azure IP platform and ensure adherence to enterprise standards.
• Handle the implementation, deployment, and support of Nessus scan engines and Tenable Security Center.
• Manage Carbon Black (CB) sensors, including deployment, maintenance, patching, and administration.
• Create watchlists to detect indicators of compromise (IOCs) and write queries in CB to search for malicious behavior.
• Serve as a primary responder for Managed Security customer systems, taking ownership of configuration issues through resolution.

Requirements

• College degree or equivalent training with experience in a SOC, Managed Security, or client network environment.
• Minimum 7 years of professional experience supporting and maintaining Splunk SIEM systems.
• 5-6 years of experience with advanced tuning of Splunk SIEM content.
• Practical hands-on experience with EDR (Carbon Black), Vectra, and Microsoft Azure.
• Proven experience with Cribl and network architecture.
• Mandatory Splunk certifications (Admin, Architect, or Consultant).
• Strong knowledge of Linux and Windows Operating Systems.
• Ability to work flexible shifts, including providing after-hours support when required.

Preferred Qualifications

• Experience with other SIEM products such as ArcSight, Nitro, or LogRhythm.
• Certifications in Azure, Managed Vulnerability (Nessus/Tenable), or Firewall security.
• Experience working with clients in a service delivery function.

Benefits

• Health insurance with a leading global provider.
• Career progression and growth through challenging projects.
• Employee engagement and wellness campaigns.
• Excellent learning and development opportunities.
• Annual flight tickets to home country.
• Inclusive, diverse, and flexible/hybrid working environment.

About the Company

Help AG is the cybersecurity arm of e& enterprise and provides leading enterprise businesses and governments across the Middle East with strategic consultancy and tailored information security services. Established in 2004, Help AG is a trusted, vendor-agnostic IT security advisor dedicated to strengthening cyber defenses and safeguarding businesses through best-of-breed technologies.