Position: SIEM Administrator (L2 Profile)

Location: Dubai, UAE

Mode of work: Work from office (Daily)

Notice period :Max 30 Days

Required skillset:

• 4+ years of experience in Elastic Search administration and SIEM operations.
• Strong expertise in Elastic Stack components: Elasticsearch, Kibana, Logstash, Beats, Elastic Agent.
• Hands-on experience with SIEM use cases, alerting, and dashboard creation.
• Proficiency in troubleshooting cluster performance, ingestion pipelines, and data indexing.
• Good understanding of Linux system administration and networking fundamentals.
• Familiarity with scripting languages (Python, Bash, or PowerShell) for automation.
• Knowledge of security monitoring, threat detection, and incident response workflows.
• Experience integrating diverse log sources into Elastic SIEM.
• Strong problem-solving and analytical skills.
• Strong communication skills and the ability to work effectively with internal teams and external vendors
• Willing to work on client location - onsite

Roles and Responsibilities:

• Administer, configure, and manage Elastic Search SIEM (Elastic Stack: Elasticsearch, Logstash, Kibana, Beats) environments.
• Develop and optimize SIEM rules, alerts, and dashboards to detect security threats.
• Conduct troubleshooting and root cause analysis for SIEM-related issues (indexing, cluster
• health, ingestion failures, and performance).
• Implement upgrades, patches, and system tuning to ensure high availability and performance.
• Manage user roles, access controls, and security configurations.
• Collaborate with SOC, security analysts, and incident responders to improve detection
• capabilities.
• Integrate data sources (cloud, on-prem, endpoints, firewalls, applications) into Elastic SIEM.
• Prepare and maintain system documentation, runbooks, and troubleshooting guides.
• Support compliance and audit requirements by ensuring log retention and security policies are followed.

Educational Qualifications:

Bachelor’s degree in Computer Science / Engineering or equivalent advanced industry

certifications

Additionally, Product certification in the above solutions

Certification Eligibility: Certification is mandatory in the tools & technology category