Senior Security Event Correlation Specialist

Job Title: Senior Security Event Correlation Specialist Location: United Arab Emirates (Remote) Employment Type: Full-Time Work Arrangement: 100% Remote — Work From Home Level: Senior About the Role We are seeking an experienced Senior Security Event Correlation Specialist to monitor, analyze, and correlate security events across enterprise IT environments to identify potential cyber threats, suspicious activities, and security incidents. The successful candidate will play a key role in strengthening security monitoring capabilities, improving threat detection accuracy, and supporting incident response through advanced event analysis and security intelligence. This fully remote position focuses on SIEM administration, security event correlation, threat detection engineering, log analysis, incident investigation, and continuous improvement of security monitoring processes. The specialist will collaborate with security operations, threat intelligence, infrastructure, and incident response teams to maintain effective cybersecurity visibility and protection. Key Responsibilities Monitor and analyze security events collected from enterprise networks, servers, endpoints, cloud platforms, and business applications. Develop, implement, and maintain security event correlation rules to identify suspicious activities and potential cyber threats. Administer and optimize Security Information and Event Management (SIEM) platforms and associated monitoring technologies. Analyze security logs, event patterns, alerts, and telemetry to identify anomalies, attack indicators, and potential security breaches. Develop detection use cases for threats such as unauthorized access, privilege escalation, malware activity, lateral movement, and data exfiltration. Correlate events across multiple security tools to identify complex attack sequences and reduce false-positive alerts. Review and fine-tune detection rules, alert thresholds, correlation logic, and monitoring configurations. Support threat hunting activities by investigating unusual event patterns and identifying previously undetected threats. Integrate security data sources, including firewalls, intrusion detection systems, endpoint detection platforms, identity systems, and cloud services. Map detection capabilities to recognized cybersecurity frameworks such as MITRE ATT&CK. Investigate escalated security alerts and provide technical analysis to incident response teams. Support the development of automated detection and response workflows using Security Orchestration, Automation and Response (SOAR) technologies. Monitor detection coverage and identify gaps in security event visibility across enterprise environments. Conduct root cause analysis of recurring security alerts and recommend improvements to detection effectiveness. Develop dashboards, reports, and metrics covering alert volumes, detection performance, incident trends, and security monitoring effectiveness. Maintain technical documentation for correlation rules, detection logic, event sources, investigation procedures, and monitoring standards. Collaborate with cybersecurity engineers, SOC analysts, infrastructure teams, and threat intelligence specialists. Support security incident reviews, audit activities, and continuous improvement initiatives. Provide technical guidance and knowledge sharing to junior security analysts and monitoring personnel. Qualifications and Experience Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related discipline. Significant professional experience in security event monitoring, SIEM engineering, security operations, or threat detection. Strong understanding of cybersecurity principles, network security, endpoint security, identity management, and security incident analysis. Demonstrated experience developing and maintaining SIEM correlation rules, detection logic, and security monitoring use cases. Practical experience with SIEM platforms such as Splunk Enterprise Security, IBM QRadar, Microsoft Sentinel, Google Security Operations, or comparable solutions. Knowledge of log management, event normalization, parsing, enrichment, and correlation techniques. Understanding of common cyberattack techniques, including phishing, ransomware, credential compromise, privilege escalation, and lateral movement. Familiarity with MITRE ATT&CK, Cyber Kill Chain, and other recognized threat detection frameworks. Experience analyzing logs from firewalls, endpoint detection and response (EDR) tools, intrusion detection systems, cloud platforms, and identity services. Knowledge of network protocols, operating systems, authentication mechanisms, and enterprise IT infrastructure. Familiarity with SOAR platforms, security automation, and incident response workflows. Ability to develop scripts using Python, PowerShell, or other relevant programming languages for security analysis and automation. Strong analytical, investigative, and problem-solving capabilities. Excellent technical documentation and communication skills. Ability to manage complex security investigations and work independently in a fully remote environment. Professional certifications such as CISSP, CISM, GCIA, GCIH, GCDA, Splunk certifications, or Microsoft security certifications are advantageous. What We Offer A 100% remote working arrangement, allowing you to work from home. Competitive compensation based on qualifications, experience, and technical expertise. Opportunities to work with advanced SIEM, threat detection, and cybersecurity monitoring technologies. A collaborative environment that encourages technical innovation and professional development. The opportunity to strengthen enterprise security monitoring, threat detection, and incident response capabilities. How to Apply Interested candidates should submit an updated CV highlighting their experience in SIEM platforms, security event correlation, threat detection engineering, log analysis, and cybersecurity operations. Applicants are encouraged to include relevant professional certifications, technical tools, detection engineering projects, and examples of complex security incidents or threat patterns they have successfully identified. Application Subject Line: Application – Senior Security Event Correlation Specialist (UAE Remote) Important: Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer. This position is structured as fully remote and focuses on security monitoring, event correlation, technical analysis, detection engineering, and virtual incident response coordination. Any activities requiring physical access to facilities or infrastructure must be performed by appropriately authorized local personnel. This job description is a general role profile and does not guarantee the availability of a specific vacancy. Show more Show less