SOC Engineer

The SOC Engineer is responsible for the design, implementation, configuration, and continuous optimization of the company's Security Operations Centre (SOC) technology platforms, ensuring secure, scalable, and resilient security monitoring services for enterprise and government customers across the MENA region.

This is a hands-on engineering role focused on designing and maintaining Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and supporting security technologies.

The role owns the end-to-end lifecycle of security monitoring capabilities - from onboarding new log sources and developing detection content to automating operational workflows and continuously enhancing SOC performance - while ensuring solutions align with customer requirements, cybersecurity best practices, and operational standards.

Location

Kuwait City, Kuwait

Responsibilities

• Design, implement, configure, and maintain enterprise SIEM and SOAR platforms supporting the company's Managed Security Services portfolio.
• Deploy and maintain highly available, scalable, and secure SOC infrastructure across customer environments.
• Manage platform upgrades, patching, configuration management, and lifecycle activities to ensure platform stability and performance.
• Develop, maintain, and optimise SIEM detection content, including correlation rules, dashboards, reports, alerts, watchlists, and use cases.
• Provide technical support to SOC Analysts during security investigations and major incident response activities.

Requirements

• 3-5 years of hands-on experience designing, implementing, and administering SIEM platforms within enterprise or Managed Security Services environments.
• Strong experience with one or more SIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, ArcSight, LogRhythm, or Elastic Security.
• Experience integrating multiple security technologies, including EDR, firewalls, IDS/IPS, cloud security platforms, identity platforms, and threat intelligence feeds.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.