SOC Engineer
- Division
- Technical
- Location
- Baghdad
- Closing Date
- 17/06/2026
Responsibilities
- SIEM Engineering & Management: Design, develop, and maintain SIEM dashboards, alerts, and reports. Handle data onboarding, CIM mapping, and optimization.
- ICT Project Collaboration: Act as the security subject matter expert (SME) in ICT project, ensuring “security by design” is integrated.
- Incident Response: Monitor security events, investigate suspicious activity, and participate in the technical response to security incidents.
- SOAR & Automation Orchestration: Develop and maintain automated playbooks (e.g., SOAR) to streamline repetitive tasks, reducing Mean Time to Respond.
- Detection Engineering: Continuously tune SIEM correlation rules and logic to reduce false positives and improve visibility into the MITRE ATT&CK framework.
- Proactive Threat Hunting: Conduct regular, intel-driven threat hunting exercises within the SIEM environment to uncover stealthy indicators.
- Customer Engagement & SOCaaS Evolution: Partner directly with customers to understand their unique security needs and participate in our SOCaaS offering.
Qualifications
Required
- 3+ years of experience in Information Security
- 1+ years of experience in ICT projects delivery
- Hands-on experience with Splunk Enterprise (Search Processing Language (SPL), data onboarding, and CIM mapping) or equivalent technologies
- Strong understanding of networking protocols (TCP/IP, DNS, VPNs) and endpoint security (EDR/AV)
Preferred Certificates
- Splunk Core Certified Advanced Power User
- Splunk Enterprise Security Admin
- NSE4-7
