SIEM Engineer – L3

DXC Technology | United Arab Emirates | On-site Senior Analyst Function: Cyber Security – Managed Detection & ResponseJob SummaryDXC Technology is seeking an experienced SIEM Engineer – L3 to engineer, administer, optimize, and support enterprise SIEM capabilities within a complex Managed Detection & Response (MDR) environment in the UAE.The role will provide advanced technical support for security monitoring and detection capabilities, with a strong focus on SIEM engineering, log source onboarding, detection content, platform integrations, performance optimization, and L3 troubleshooting.Key ResponsibilitiesEngineer, configure, administer, maintain, and optimize enterprise SIEM platforms supporting SOC/MDR operations.Onboard security and operational log sources across endpoints, servers, networks, security devices, applications, databases, identity platforms, and cloud environments.Configure and troubleshoot collectors, agents, connectors, APIs, parsers, normalization, and data ingestion pipelines.Develop and tune correlation rules, detection use cases, alerts, dashboards, reports, and threat monitoring content.Map detection use cases against MITRE ATT&CK techniques and relevant threat scenarios.Integrate SIEM with SOAR, EDR/XDR, IAM/PAM, threat intelligence, vulnerability management, network security, and cloud security platforms.Provide L3 troubleshooting for complex SIEM platform, ingestion, parsing, integration, performance, and data-quality issues.Support SOC/MDR analysts during advanced investigations, threat hunting, and major security incidents.Optimize detection coverage and alert quality while reducing false positives and detection gaps.Monitor SIEM platform health, capacity, availability, and performance and support upgrades and technical improvements.Collaborate with SOC analysts, detection engineers, threat intelligence, incident response, and infrastructure teams.Maintain accurate technical documentation for log sources, integrations, configurations, detection rules, and operational procedures.Required Experience7+ years of cybersecurity experience, including strong hands-on SIEM engineering, administration, or implementation experience.Strong experience with enterprise SIEM technologies such as Microsoft Sentinel, Splunk Enterprise Security, IBM QRadar, Google Security Operations/Chronicle, or equivalent.Hands-on experience with log onboarding, parsing, normalization, correlation, data ingestion, and troubleshooting.Experience developing and tuning SIEM correlation rules, detection logic, alerts, dashboards, and security use cases.Strong understanding of SOC/MDR operations, incident response, threat detection, threat hunting, and MITRE ATT&CK.Experience integrating SIEM with multiple enterprise security technologies and cloud environments.Working knowledge of query or scripting languages such as KQL, SPL, AQL, YARA-L, Python, or PowerShell.Strong analytical, troubleshooting, and problem-solving capabilities.Preferred QualificationsBachelor's degree in Cybersecurity, Computer Science, IT, Engineering, or related discipline.Previous experience supporting a SOC, MDR, MSSP, or large enterprise security monitoring environment.Experience with security monitoring across Azure, AWS, or GCP environments.UAE/GCC experience is advantageous.Certifications such as Microsoft SC-200, Splunk, QRadar, GIAC, Security+, CySA+, or equivalent are preferred.Join DXC Technology and contribute to strengthening enterprise threat detection and Managed Detection & Response capabilities in the UAE.