SIEM Engineer

About the role

Madre Integrated Engineering is hiring a full-time SIEM Engineer in Doha. The role covers the implementation and management of SIEM platforms, integration of log sources, detection rule development and collaboration with SOC and incident response teams.

Key responsibilities

• Deploy, configure and maintain SIEM platforms such as Splunk, QRadar, ArcSight and LogRhythm.
• Integrate diverse log sources, build custom parsers and tune rules for accurate detection.
• Create, test and optimise detection rules, correlation logic and alerts based on threat models and business risks.
• Work closely with SOC and Incident Response teams to improve investigative workflows.
• Use Python, PowerShell or similar scripting languages for automation, dashboards and custom reporting.
• Improve monitoring coverage and ensure proactive detection of advanced threats.
• Maintain technical documentation, detection playbooks and compliance reports.

Required profile

• Bachelor's degree in Computer Science, Information Technology or a related discipline.
• Minimum 8+ years of experience in SIEM engineering, security monitoring or SOC environments.
• Splunk Certified Architect certification.
• GCIA (GIAC Certified Intrusion Analyst) or equivalent SIEM/security certifications.