Security Platform / SIEM Engineer

About ASAL:

ASAL Technologies was established in 2000 and has grown to become a leading technology company across Jordan, KSA, UAE, and Palestine. With a workforce of over 450 engineers, ASAL offers a wide range of AI agents, services and products, Software and Digital Transformation services, Engineering and R&D services. ASAL Technologies is assembling a team of PD Engineers for a high-end multinational company. The team will be working with top notch engineers in the semiconductor industry from all over the world.

What you will do:

•

Onboard client log sources (firewalls, Windows, Linux, cloud) into our SIEM .

•

Write, test and tune detection rules mapped to MITRE ATT&CK, using Atomic Red Team and Caldera on our lab range.

•

Keep the pipeline healthy: ingestion, storage, updates, backups and 'no logs' alerts.

•

Support our SOC analysts when a detection fires, or fails to fire.

•

Build connectors, parsers and dashboards as new clients arrive( Multi Tanent environment).

•

Take part in the on-call rota.

•

Run purple-team cycles and threat hunts, and turn what you find into detections, including for AI-driven attacks.

•

3+ years in SIEM engineering, security engineering or SOC operations, writing detection rules yourself.

•

Solid Linux, Docker and scripting (bash, Python).

•

Good knowledge of firewall, Windows and Linux logs and of MITRE ATT&CK.

•

Hands-on threat hunting and knowledge of red-team / adversary-emulation tools (Atomic Red Team, Caldera or similar).

•

Understanding of vulnerabilities, defence methods and how attackers use AI (AI-written phishing, deepfakes, prompt injection, AI-assisted red teaming), and of how AI can speed up detection engineering.

•

Strong written and verbal English skills.

Nice to have

•

Sigma rules; Atomic Red Team or Caldera.

•

FIM, YARA Rules.

•

Microsoft 365 / Entra ID or AWS log sources.

•

Security certifications (e.g. BTL1, GCIH, Fortinet NSE).