soc engineer

techzone technologies llc

We Are Hiring: Senior SOC Engineer / Digital Forensics &amp; Incident Response (DFIR)Join our Cyber Security team at Etisalat UAE &ndash; Head Office, Dubai.We are looking for a highly skilled cybersecurity professional with strong expertise in digital forensics, incident response, threat hunting, and security operations to protect and defend our digital infrastructure against advanced threats.Key ResponsibilitiesThreat Monitoring &amp; Incident Response<ul><li>Monitor security alerts across SIEM, EDR, IDS/IPS, and network security tools.</li><li>Perform full lifecycle incident response: detection, containment, eradication, and recovery.</li><li>Lead forensic investigations for cyber incidents including APTs, ransomware, and insider threats.</li></ul>Digital Forensics &amp; Evidence Handling<ul><li>Conduct host, network, and mobile forensics across Windows, Linux, macOS, and mobile platforms.</li><li>Utilize advanced forensic tools (EnCase, FTK, Cellebrite, Oxygen, Volatility).</li><li>Ensure proper chain of custody and documentation aligned with regulatory standards.</li></ul>Threat Hunting &amp; Intelligence<ul><li>Perform proactive threat hunting based on IOCs, TTPs, and behavioral analysis.</li><li>Analyze global threat intelligence feeds and track emerging cyber risks.</li><li>Develop custom hunting queries using KQL and enhance detection rules.</li></ul>Cloud Security &amp; IR<ul><li>Lead cloud incident response and forensics across AWS &amp; Azure environments.</li><li>Investigate cloud logs, identity events, workload activities, and anomalous behaviors.</li></ul>Automation &amp; Advanced Analysis<ul><li>Use Python/PowerShell scripts to automate investigation and response tasks.</li><li>Conduct initial malware analysis and assess potential impact.</li></ul>Reporting &amp; Documentation<ul><li>Produce detailed incident reports, forensic summaries, and threat-hunting findings.</li><li>Present technical insights clearly to both technical and non-technical stakeholders.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Security, or related field.</li><li>6&ndash;8 years of experience in SOC, DFIR, Threat Hunting, or Cyber Incident Response.</li><li>Strong experience with SIEM (Splunk, Sentinel), EDR, packet analysis, and log forensics.</li><li>Mandatory DFIR certifications (GCFA, GCIH, GCFE, or equivalent preferred).</li><li>Strong scripting skills (Python, PowerShell) and familiarity with MITRE ATT&amp;CK.</li><li>Excellent analytical skills, attention to detail, and ability to work under pressure.</li><li>Fluent in English.</li></ul>Job Type: Full-timePay: AED18,000.00 - AED22,000.00 per monthApplication Question(s):<ul><li>Do you have hands-on experience in Digital Forensics &amp; Incident Response (DFIR), including host forensics, memory analysis, network forensics, and incident handling?</li></ul>(Please mention the tools you use such as EnCase, FTK, Cellebrite, Volatility, Splunk, Sentinel, etc.)<ul><li>Have you previously worked in a SOC environment with threat hunting responsibilities?</li></ul>(Kindly share your experience with SIEM, EDR, IDS/IPS, and cloud IR on AWS/Azure.)<ul><li>Do you hold any cybersecurity certifications such as GCFA, GCIH, GCFE, OSCP, or similar?</li></ul>(Please list all relevant certifications.)<ul><li>What is your expected salary, age, notice period, and current location?</li></ul>

Senior Soc Engineer/ Digital Forensics & Incident Response

Htech Solution Pvt. Ltd.

Certifications Required: CEH, CompTIA Security+, SOC Handling, SIEM Implementation&middot; Vendor-specific certifications: ELK, QRadar, Wazuh (advantage)&middot; Fortinet NSE, Cisco CyberOps, (plus)At least four years Bachelors in IT / Computer Science / Telecom/ EngineeringExperience: 3-4 years of relevant professional experience in SOC operations, cyber security, or incident response.Responsibilities:&middot; Monitor real-time threats and handle security incidents across Client IT systems using advanced SOC tools.&middot; Deploy, configure, and manage SIEM solutions (Wazuh, Splunk, ELK, QRadar, etc.) for log collection, analysis, intrusion detection, and anomaly reporting.&middot; Perform malware analysis, digital forensics, and evidence preservation to support cybercrime investigations.&middot; Implement and integrate threat intelligence feeds tailored for law enforcement use cases.&middot; Utilize frameworks such as MITRE ATT&amp;CK and NIST for incident detection, classification, and response.&middot; Conduct forensic investigations with tools such as Volatility, Autopsy, Ghidra, and IDA Pro.&middot; Carry out vulnerability assessments, penetration testing, and remediation planning.&middot; Monitor and tune firewalls, IDS/IPS, and VPN security systems.&middot; Familiarity with security tools and devices.&middot; Support law enforcement digital platforms (CCTV, bodycams, and surveillance systems) by securing data pipelines and ensuring data integrity.&middot; Conduct awareness sessions for Client officers on phishing, ransomware, and cyber hygiene best practices.&middot; Collaborate with Client units for proactive threat hunting and incident response.&middot; Manage the full incident response lifecycle: detection, triage, containment, eradication, recovery, and reporting.&middot; Prepare incident reports, forensic documentation, and compliance reviews for audits and investigations.&middot; Provide IT assistance during emergency response operations.&middot; Perform any other tasks assigned by Client.Job Type: Full-timeWork Location: In person

SOC Engineer / Cyber Security Engineer

<div>Overview:
<div>
WHAT YOU DO AT AMD CHANGES EVERYTHING</div><div>
At AMD, our mission is to build great products that accelerate next-generation computing experiences&mdash;from AI and data centers, to PCs, gaming and embedded systems. Grounded in a culture of innovation and collaboration, we believe real progress comes from bold ideas, human ingenuity and a shared passion to create something extraordinary. When you join AMD, you&rsquo;ll discover the real differentiator is our culture. We push the limits of innovation to solve the world&rsquo;s most important challenges&mdash;striving for execution excellence, while being direct, humble, collaborative, and inclusive of diverse perspectives. Join us as we shape the future of AI and beyond. Together, we advance your career.</div>
Responsibilities:
<div>
SOC Verification Design Engineer</div><div> 
</div><div>THE ROLE:</div><div>
The focus of this role is to plan, build, and execute the verification of new and existing features for AMD&rsquo;s graphics processor IP, resulting in no bugs in the final design.</div><div></div><div> 
THE PERSON:</div><div>
You have a passion for modern, complex processor architecture, digital design, and verification in general. You are a team player who has excellent communication skills and experience collaborating with other engineers located in different sites/timezones. You have strong analytical and problem-solving skills and are willing to learn and ready to take on problems.</div><div></div><div> 
KEY RESPONSIBILITIES:</div><ul><li>
Collaborate with architects, hardware engineers, and firmware engineers to understand the new features to be verified</li><li>
Build test plan documentation, accounting for interactions with other features, the hardware, the firmware, and the software driver use cases</li><li>
Estimate the time required to write the new feature tests and any required changes to the test environment</li><li>
Build the directed and random verification tests</li><li>
Debug test failures to determine the root cause; work with RTL and firmware engineers to resolve design defects and correct any test issues</li><li>
Review functional and code coverage metrics &ndash; modify or add tests or constrain random tests to meet the coverage requirements</li></ul><div></div><div> 
PREFERRED EXPERIENCE:</div><ul><li>
Proficient in IP level ASIC verification with 7+years of experience</li><li>
Proficient in debugging firmware and RTL code using simulation tools</li></ul><ul><li>
Proficient in using UVM testbenches and working in Linux and Windows environments</li><li>
Experienced with Verilog, System Verilog, C, and C++</li><li>
Graphics pipeline knowledge</li><li>
Developing UVM based verification frameworks and testbenches, processes and flows</li><li>
Automating workflows in a distributed compute environment.</li></ul><ul><li>
Exposure to simulation profile, efficiency improvement, acceleration, HLS tools/process</li><li>
Strong background in the C++ language, preferably on Linux with exposure to Windows platform</li><li>
Good understanding and hands-on experience in the UVM concepts and SystemVerilog language</li><li>
Good working knowledge of SystemC and TLM with some related experience.</li><li>
Scripting language experience: Perl, Ruby, Makefile, shell preferred.</li></ul><ul><li>
Exposure to leadership or mentorship is an asset</li><li>
Desirable assets with prior exposure to video codec system or other multimedia solutions.</li></ul><div></div><div> 
ACADEMIC CREDENTIALS:</div><ul><li>
Bachelors or Masters degree in computer engineering/Electrical Engineering</li></ul> 
#LI-SG
Qualifications:
<div>
Benefits offered are described: AMD benefits at a glance.</div><div></div><div> 
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants&rsquo; needs under the respective laws throughout all stages of the recruitment and selection process.</div></div>

SOC Verification Engineer

Booz Allen Hamilton

<div>Splunk Architect and SOC Solutions Engineer, Lead
Key Role:
Support our various government clients. Lead engagements focused on assessment, architecture, and deployment of enterprise-scale Splunk solutions, including operational development and providing oversight for a Splunk log management infrastructure. Help manage Splunk, an equivalent hardware infrastructure, and oversee production support. Provide architecture-level design to support and operate Splunk using Security Information and Event Management (SIEM) or Security Event Management (SEM) best practices and Splunk enterprise security. Manage customer expectations, help onboard data into Splunk, support projects in multi-site or clustered Splunk installations, and assist with the development of advanced KPIs and metrics to meet the requirements of key stakeholders. Conduct research in areas driven by customer use cases, architect and support systems used to configure and deploy solutions. Assist with the automation, deployment, integration, and testing of enterprise systems and services and create and optimize Big Data correlations as a Splunk search language (SPL) expert.
Basic Qualifications:<ul><li>
3+ years of experience with Splunk administration and architecture, including Splunk components, such as Splunk Enterprise Security (ES) and Splunk User and Entity Behavior Analytics (UEBA)</li><li>
3+ years of experience with Splunk development and Splunk components such as indexer, search head, forwarder, or deployment server</li><li>
5+ years of experience in IT infrastructure, networking, architecture, administration, or security</li><li>
Experience with customer interaction and data onboarding, configuration, and optimization in Splunk</li><li>
Knowledge of security operations service capabilities, including monitoring, detection, and analysis, incident response, solutions architecture, engineering, and tool deployment, integration, and support</li><li>
Public Trust</li><li>
Bachelor&rsquo;s degree in Computer Science, Information Systems, Information Assurance, Engineering, or Business</li></ul>
Additional Qualifications:<ul><li>
Experience working in a fast-paced, security operations center, promptly responding to critical mission needs as needed</li><li>
Experience with contributing to technical proposal responses and technical white papers</li><li>
Experience with Linux shell scripting, Python, and Regex</li><li>
Experience with security tools, including Firewall, IDS, Active Directory, Nmap, Burp, Proxy, Bro, or Endpoint technologies</li><li>
Knowledge of networking protocols</li><li>
Knowledge of the integration of threat intelligence, threat hunt, forensics, and malware analysis into security operations</li><li>
Ability to communicate with management and other technical subject matter experts and operators</li><li>
Splunk Certified Architect, Splunk Enterprise Security Certified Admin, or Comp TIA CISSP Certification</li></ul> 
Vetting:
Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client; Public Trust determination is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $112,800.00 to $257,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Splunk Architect and SOC Solutions Engineer, Lead

Techrevive

We&rsquo;re Hiring &ndash; SOC Lead / Senior SOC Engineer | DubaiAre you passionate about cybersecurity and ready to take your SOC expertise global?We&rsquo;re looking for experienced SOC professionals (5+ years) to join our client&rsquo;s Security Operations Center in Dubai.Location: Dubai (Candidates from India are welcome)Visa &amp; Airfare: ProvidedJoining: Immediate / Short Notice PreferredMust-Have Expertise:<ul><li>SOC Operations, Incident Response &amp; Threat Hunting</li><li>IBM QRadar / FortiSIEM / Microsoft Sentinel</li><li>FortiSOAR (Playbooks &amp; Automation)</li><li>Microsoft Defender for Endpoint (MDE)</li><li>Azure Security &amp; Cloud Defense</li></ul>Key Responsibilities:<ul><li>Deploy, configure &amp; maintain IBM QRadar SIEM &mdash; fine-tune use cases and integrate log sources</li><li>Monitor, analyze, and respond to incidents from SIEM, EDR, and network security tools</li><li>Manage &amp; monitor MDE, investigate alerts, and perform endpoint forensics</li><li>Implement &amp; manage Azure security controls (Defender for Cloud, Sentinel)</li><li>Configure Azure firewalls, NSGs &amp; automate responses using Logic Apps</li></ul>Job Types: Full-time, PermanentPay: &#8377;1,700,000.00 - &#8377;2,400,000.00 per yearBenefits:<ul><li>Provident Fund</li></ul>

SOC Analyst L3

Nets-international Communication

Overview We are seeking a skilled Splunk Engineer with strong administration and operational experience to design, implement, and maintain Splunk infrastructure and analytics solutions. The ideal candidate will have hands-on expertise in Splunk Enterprise / Enterprise Security (ES), data onboarding, dashboard creation, alert tuning, and system administration. This role bridges engineering, operations, and security analytics, ensuring Splunk runs optimally while delivering actionable insights.Key Responsibilities<ul><li>Design, deploy, and maintain Splunk environments (indexers, search heads, forwarders, deployment servers, cluster masters).</li><li>Create and optimize SPL queries, dashboards, reports, and alerts for operational visibility and threat detection.</li><li>Develop and automate data onboarding pipelines from diverse sources (syslog, cloud, API, EDR tools).</li><li>Integrate Splunk with SIEM/SOAR platforms, cloud services (AWS, Azure, GCP), and endpoint security tools.</li><li>Support use case development for security monitoring and compliance (SOC, IT Ops, or DevOps).</li><li>Perform installation, configuration, and upgrade of Splunk components.</li><li>Manage user roles, authentication, and access control (RBAC).</li><li>Monitor system health, indexing performance, and data retention policies.</li><li>Handle license management, data optimization, and troubleshooting.</li><li>Conduct backup, recovery, and disaster recovery planning for Splunk infrastructure.</li></ul>Security &amp; Operations<ul><li>Collaborate with SOC Analysts to build and tune correlation searches.</li><li>Ensure data integrity, confidentiality, and compliance with security standards (SOC 2, ISO 27001, NIST).</li><li>Participate in incident response and threat analysis leveraging Splunk dashboards.</li><li>Automate repetitive tasks using scripts (Python, Bash, PowerShell) and APIs.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>3+ years of experience in Splunk engineering or administration.</li><li>Proficiency in Splunk Enterprise / ES, SPL scripting, and data onboarding.</li><li>Experience managing Splunk clusters, indexing, and search head configurations.</li><li>Strong understanding of log parsing, data normalization, and regex extractions.</li><li>Familiarity with Linux/Windows administration and network security concepts.</li><li>Experience with security frameworks (NIST, MITRE ATT&amp;CK, SOC2, PCI-DSS).</li><li>Scripting skills in Python, Shell, or PowerShell.</li><li>Excellent problem-solving and analytical skills.</li></ul>Preferred Qualifications<ul><li>Splunk Certifications:</li><li>Splunk Core Certified Power User</li><li>Splunk Enterprise Certified Admin</li><li>Splunk Enterprise Security Certified Admin</li><li>Knowledge of cloud-based Splunk (Splunk Cloud, AWS, Azure integrations).</li><li>Experience working in a Security Operations Center (SOC) environment.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Splunk Engineer: 4 years (Required)</li></ul>

Splunk Engineer

Teamficient

Location: Remote Employment Type: Full-Time | 24/7 Support Environment Compensation: $750 &ndash; $1000 USD per month (based on experience)About the RoleWe are seeking an experienced SOC Analyst (Level 3) to join our growing cybersecurity team. This role will play a key part in building and operating a 24&times;7 Security Operations Center (SOC), focusing on advanced threat detection, incident response, and continuous improvement of our cybersecurity posture.You&rsquo;ll collaborate with the SOC Manager and cross-functional teams to enhance detection and response capabilities, automate workflows, and maintain compliance with industry standards such as ISO 27001, SOC 2, and NIST CSF.Key Responsibilities<ul><li>Deploy, configure, and maintain SOC tools including SentinelOne EDR, Wazuh SIEM, Splunk, and IBM QRadar.</li><li>Monitor and analyze alerts from endpoints, networks, and cloud environments, ensuring accurate detection and validation of potential threats.</li><li>Lead incident triage, containment, remediation, and post-incident analysis for escalated cases.</li><li>Integrate telemetry and API feeds from firewalls, servers, and other sources for unified visibility.</li><li>Develop and maintain SOC runbooks, playbooks, and workflows aligned with best practices.</li><li>Collaborate with the SOC Manager to enhance detection, response, and reporting processes.</li><li>Coordinate with IT operations teams for system patching, hardening, and remediation.</li><li>Build and maintain dashboards and reports to track SOC performance and incident metrics.</li><li>Mentor and guide Level 1 and Level 2 analysts, providing escalation support and training.</li><li>Participate in threat hunting, forensic analysis, and automation initiatives to improve SOC efficiency.</li><li>Ensure all SOC activities comply with relevant security and compliance frameworks.</li></ul>Required Qualifications &amp; Skills<ul><li>3&ndash;5 years of hands-on experience in SOC operations, incident response, or cybersecurity engineering.</li><li>Strong working knowledge of EDR and SIEM tools (SentinelOne, Wazuh, Splunk, QRadar, or equivalent).</li><li>Practical experience with log analysis, correlation, and security integrations.</li><li>Solid understanding of Windows/Linux event logs, MITRE ATT&amp;CK, and network protocols.</li><li>Exposure to automation or scripting (PowerShell, Python, or Bash) is preferred.</li><li>Excellent analytical, problem-solving, and communication skills.</li><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or Information Technology (Master&rsquo;s preferred).</li><li>Certifications such as CEH, CompTIA Security+, or CySA+ are advantageous.</li></ul>What We Offer<ul><li>100% remote work in a dynamic, global security team.</li><li>Opportunities to work with advanced SOC technologies and continuous learning support.</li><li>Exposure to international compliance and cybersecurity standards.</li><li>Competitive compensation based on experience and qualifications.</li></ul>Job Type: Full-timePay: Rs200,000.00 - Rs280,000.00 per monthApplication Question(s):<ul><li>Do you have experience managing 24/7 operations/security teams?</li><li>How familiar are you with SOC, NIST, and CIS frameworks?</li><li>Indicate the security tools you have hands-on experience</li><li>Are you familiar with compliance standards such as ISO 27001, GDPR, HIPAA, or similar regional regulations?</li><li>Do you have experience with scripting/automation (Python, PowerShell, or SOAR tools)?</li><li>How much is your expected salary in USD?</li></ul>Experience:<ul><li>IT operations &amp; security: 6 years (Required)</li></ul>

SOC Analyst – Level 3

Search 8554+ Soc engineer jobs near you this November. New roles added regularly across leading industries. Apply today.