SOC Engineer

Division
Technical
Location
Baghdad
Closing Date
17/06/2026

Responsibilities

  • SIEM Engineering & Management: Design, develop, and maintain SIEM dashboards, alerts, and reports. Handle data onboarding, CIM mapping, and optimization.
  • ICT Project Collaboration: Act as the security subject matter expert (SME) in ICT project, ensuring “security by design” is integrated.
  • Incident Response: Monitor security events, investigate suspicious activity, and participate in the technical response to security incidents.
  • SOAR & Automation Orchestration: Develop and maintain automated playbooks (e.g., SOAR) to streamline repetitive tasks, reducing Mean Time to Respond.
  • Detection Engineering: Continuously tune SIEM correlation rules and logic to reduce false positives and improve visibility into the MITRE ATT&CK framework.
  • Proactive Threat Hunting: Conduct regular, intel-driven threat hunting exercises within the SIEM environment to uncover stealthy indicators.
  • Customer Engagement & SOCaaS Evolution: Partner directly with customers to understand their unique security needs and participate in our SOCaaS offering.

Qualifications

Required

  • 3+ years of experience in Information Security
  • 1+ years of experience in ICT projects delivery
  • Hands-on experience with Splunk Enterprise (Search Processing Language (SPL), data onboarding, and CIM mapping) or equivalent technologies
  • Strong understanding of networking protocols (TCP/IP, DNS, VPNs) and endpoint security (EDR/AV)

Preferred Certificates

  • Splunk Core Certified Advanced Power User
  • Splunk Enterprise Security Admin
  • NSE4-7
Resume *

Accepted formats: PDF, DOC, DOCX — up to 5MB.