SIEM Engineer

About the role

We are seeking an experienced SIEM Engineer to join our team in Bahrain. You will own the full engineering lifecycle of SIEM platforms in a multi‑tenant MSSP environment, ensuring reliable log collection, detection, and reporting for our clients.

Key responsibilities

• Administer, configure and optimise SIEM components across multiple client deployments.
• Monitor platform health, capacity and licensing, taking proactive actions to avoid degradation.
• Perform upgrades, patches and configuration changes following change‑management procedures.
• Troubleshoot end‑to‑end issues across SIEM platforms, collectors, network and OS layers.
• Onboard diverse log sources (firewalls, endpoints, cloud services, custom apps) and validate accurate ingestion.
• Develop custom parsers using regex and native parsing frameworks.
• Design, implement and continuously tune correlation rules and detection use cases aligned with MITRE ATT&CK.
• Create dashboards, reports and compliance views for clients and internal teams.
• Maintain backup, recovery and data‑retention settings in line with contractual and regulatory requirements.

Required profile

• Minimum 3 years of hands‑on experience with an enterprise SIEM platform.
• Proven ability to build custom parsers for complex log formats.
• Strong analytical skills and experience with log source onboarding.
• Excellent documentation and communication abilities.

Required skills

• LogRhythm, Splunk, Microsoft Sentinel or FortiSIEM
• Regex for parser development
• Custom parser development
• Detection rule engineering
• Collector/forwarder administration
• MITRE ATT&CK framework