Senior Security Event Correlation Specialist بدوام كامل في الإمارات العربية المتحدة
التخصص
الأمن والسلامة
نوع الدوام
دوام كامل
الخبرة
أي مستوى
الموقع
الإمارات العربية المتحدة
وصف الوظيفة
Job Title: Senior Security Event Correlation SpecialistLocation: United Arab Emirates (Remote)Employment Type: Full-TimeWork Arrangement: 100% Remote — Work From HomeLevel: SeniorAbout the RoleWe are seeking an experienced Senior Security Event Correlation Specialist to strengthen cybersecurity monitoring, threat detection, and security incident analysis across enterprise IT environments. This role focuses on correlating security events from multiple sources, identifying suspicious activity, developing detection logic, and improving the effectiveness of Security Information and Event Management (SIEM) platforms. The successful candidate will provide remote technical expertise to security operations teams, helping identify potential threats, investigate complex event patterns, and improve the organisation's overall security monitoring capabilities.Key ResponsibilitiesDesign, develop, and maintain security event correlation rules, detection logic, and monitoring use cases across enterprise security platforms.Analyse security logs and event data from firewalls, endpoint detection systems, identity platforms, servers, cloud environments, network devices, and business applications.Correlate events across multiple systems to identify suspicious behaviour, attack patterns, indicators of compromise, and potential security incidents.Configure and optimise SIEM platforms to improve event ingestion, normalisation, enrichment, correlation, and alert prioritisation.Develop detection use cases aligned with recognised threat frameworks, including MITRE ATT&CK.Investigate complex security alerts and distinguish genuine threats from false positives and routine system activity.Perform historical event analysis to identify recurring attack patterns, anomalous behaviour, and previously undetected security risks.Review alert quality, detection coverage, and correlation-rule effectiveness to improve monitoring accuracy.Develop and maintain detection engineering documentation, correlation rule inventories, event source mappings, and investigation procedures.Collaborate with Security Operations Centre (SOC), incident response, threat intelligence, infrastructure, and cybersecurity engineering teams.Support threat hunting activities through event correlation, behavioural analysis, and investigation of unusual system activity.Analyse authentication events, privilege escalation patterns, lateral movement indicators, network anomalies, and suspicious data access.Review security monitoring coverage across cloud, hybrid, endpoint, network, and enterprise application environments.Recommend improvements to log collection, retention, event enrichment, alert routing, and escalation workflows.Support incident investigations by preparing timelines, evidence summaries, event relationships, and technical findings.Monitor emerging cyber threats and translate relevant threat intelligence into actionable detection rules and monitoring scenarios.Assist with the development of automated alert enrichment and security orchestration workflows.Conduct periodic reviews of detection gaps, monitoring limitations, and security event processing performance.Prepare technical reports and management summaries covering detection performance, security trends, and unresolved monitoring risks.Provide remote technical guidance to SOC analysts and security engineering teams on correlation methodologies and investigation techniques.Qualifications and ExperienceBachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.Significant experience in security event monitoring, SIEM engineering, threat detection, security operations, or incident analysis.Strong knowledge of SIEM platforms such as Splunk Enterprise Security, Microsoft Sentinel, IBM QRadar, Google Security Operations, or equivalent solutions.Practical experience developing correlation rules, detection queries, alert logic, and security monitoring use cases.Strong understanding of security logs, event normalisation, data enrichment, and log source integration.Experience analysing endpoint, network, identity, firewall, cloud, and application security events.Knowledge of common cyberattack techniques, including phishing, credential compromise, privilege escalation, lateral movement, and data exfiltration.Familiarity with MITRE ATT&CK, cyber threat intelligence, and recognised incident response frameworks.Experience with query languages and detection technologies such as SPL, KQL, SQL, or equivalent.Understanding of network protocols, operating systems, identity management, endpoint security, and cloud infrastructure.Familiarity with security automation, SOAR platforms, scripting, and alert enrichment techniques.Strong analytical, investigative, and problem-solving abilities with excellent attention to detail.Ability to communicate technical findings clearly to security analysts, engineers, management, and other stakeholders.Relevant certifications such as Splunk, Microsoft Security, GIAC, or other recognised cybersecurity qualifications are an advantage.What We OfferA fully remote working arrangement based in the UAE.Competitive compensation aligned with experience and technical expertise.Opportunities to work with enterprise cybersecurity platforms and advanced threat detection technologies.Exposure to complex security monitoring, detection engineering, and threat investigation initiatives.Opportunities for professional development and industry-recognised certifications.How to ApplyInterested candidates should submit an up-to-date CV highlighting their experience in SIEM engineering, security event correlation, detection rule development, threat analysis, and cybersecurity operations.Application Subject: Application – Senior Security Event Correlation Specialist (UAE Remote)Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.
التعليقات
لا توجد تعليقات منشورة حتى الآن.