{"id":500344,"url":"https://alion.io/job/g42-lead-soc-engineer-siem-cpx","title":"Lead SOC Engineer (SIEM) (CPX)","company":{"id":190,"name":"G42","domain":"g42.ai","url":"https://alion.io/company/g42","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":94,"open_postings":7,"ghost_share":0,"stale_share":0.143,"repost_share":0.143,"time_to_fill_p50_days":24,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United Arab Emirates"],"countries":["AE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":95000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"IBM QRadar","optional":false},{"name":"LogRhythm","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-09-07T00:00:00Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-11-04T03:51:10Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":58},"description":"Overview:\nThe SOC Lead Engineer, SIEM has a vital role in the SOC that encompasses technical leadership, SIEM architecture design, and pre-sales support. This position is responsible for overseeing the management and coordination of SIEM solutions, within the Security Operations Center (SOC). The SOC Lead Engineer will guide senior and junior engineers in day-to-day operations across multiple environments and customers, while also assisting in pre-sales estimations of SIEM licenses. Reporting to the Senior SOC Engineering & Architecture Manager, the SOC Lead Engineer, SIEM is a seasoned professional with over a decade of experience in SIEM operations.\nResponsibilities:\nLead the technical operations and management of SIEM tools including Splunk, Sentinel, LogRhythm,Qradar and FortiSIEM.\nOversee the maintenance and functionality of the log collection layer, with a focus on tools like CRIBL.\nEnsure the health and functionality of SIEM systems through regular checks and maintenance activities.\nOversee and manage SIEM licenses, including forecasting, tracking usage, and coordinating with sales for estimations and renewals.\nOptimize SIEM telemetry to ensure efficient and accurate data collection, correlation, and reporting.\nDevelop and enforce logging standards across all customers, systems and platforms to maintain consistent and reliable log data\nProvide guidance and mentorship to SOC Engineers in managing and resolving issues related to SIEM services and log management.\nParticipate in pre-sales activities to provide technical expertise and estimation for SIEM licenses and architectures.\nCollaborate with SOC Engineering & Architecture Manager to develop SIEM architecture strategies and implement initiatives.\nAssist in continuous process improvements to increase SOC efficiency and effectiveness.\nProvide regular and accurate reporting on SIEM services, SOC operations, and license management to relevant stakeholders.\nSkills:\nExtensive knowledge and hands-on experience with SIEM tools such as Splunk, Sentinel, LogRhythm, FortiSIEM, and log collection components like CRIBL.\nProven technical leadership skills in a complex, fast-paced environment.\nDemonstrable pre-sales experience, particularly in estimating SIEM licenses.\nStrong understanding of SOC operations, cybersecurity principles, and best practices.\nExceptional problem-solving skills and the ability to make decisions under pressure.\nExcellent mentorship and team development capabilities.\nHigh proficiency in written and verbal communication.\nQualifications:\nCertifications:\nCertified Information Systems Security Professional (CISSP).\nCertified Information Security Manager (CISM).\nSplunk Certified Architect or similar SIEM certifications are a must.\nCloud-related certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert.\nNetworking certifications such as CCNA or CCNP are advantageous.\nEducational Experience:\nBachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.\nA minimum of 10 years of experience in SIEM and SOC operations, with significant experience in SIEM management and architecture.\nPrior leadership role experience within a SOC or similar cybersecurity environment.","description_format":"text","description_chars":3306,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","LLM & Generative AI","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-09-07T09:24:45Z"}],"visa":[],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.595,"p_room":0.35,"age_days":58,"expected_fill_days":24,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/g42-lead-soc-engineer-siem-cpx","json_url":"https://alion.io/job/g42-lead-soc-engineer-siem-cpx.json","meta":{"generated_at":"2026-11-04T06:49:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10711,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":190},"rest":"https://alion.io/mcp/rest/get_company?id=190"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fg42-lead-soc-engineer-siem-cpx"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fg42-lead-soc-engineer-siem-cpx"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fg42-lead-soc-engineer-siem-cpx"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/g42-lead-soc-engineer-siem-cpx\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fg42-lead-soc-engineer-siem-cpx"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":500344}},{"tool":"search_jobs","arguments":{"company":"g42.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":500344},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}