Security Consultant – SIEM & SOAR

Help AG is looking for a talented & experienced Security Consultant – SIEM & SOAR position whose primarily focused on post-sales Professional Services activities, including implementation, integration, configuration, optimization, troubleshooting, and support for enterprise cybersecurity solutions. The role will have a strong technical focus on Splunk SIEM, Palo Alto Cortex XSOAR, Fortinet FortiSOAR, DevSecOps, and security automation.

The consultant will support ongoing and upcoming cybersecurity integration projects, collaborate with the Managed Security Services (MSS) team on project delivery, and provide technical expertise to support the resolution of SIEM and SOAR-related support tickets and escalations. Post-sales activities include solution implementation, system integration, configuration, architecture validation, troubleshooting, optimization, technical documentation, knowledge transfer, and ongoing technical support. The role may also involve pre-sales activities, including technical workshops, proof of concepts (POCs), solution demonstrations, effort estimation, and support in preparing Statements of Work (SoWs).

The primary objectives are customer satisfaction, technical excellence, professionalism, high-quality project delivery, and effective cross-team technical support.

Responsibilities

• Act as a Zscaler Subject Matter Expert (SME) for Help AG customers.

• Lead large and complex ZIA and ZPA deployments.

• Architect, design, implement and optimize Zscaler solutions.

• Lead technical activities across multiple customer and vendor teams.

• Take technical ownership of Zscaler implementation projects.

• Validate solution architecture and identify technical gaps or risks.

• Lead production migration and rollout activities.

• Develop migration strategies for large user and application populations.

• Develop implementation, migration and rollback plans.

• Troubleshoot complex Zscaler, network, application and identity issues.

• Lead technical workshops with customers.

• Provide guidance and mentoring to other Help AG engineers.

• Conduct knowledge-transfer sessions for internal teams and customers.

• Work closely with Zscaler Professional Services and Support.

• Maintain project technical documentation.

• Develop HLDs, LLDs, migration plans and implementation runbooks.

• Support presales teams with technical solution design.

• Support preparation and validation of project Statements of Work.

• Lead and deliver customer POCs.

• Identify project technical risks and dependencies early.

• Escalate customer-side and vendor-side dependencies that could impact delivery.

• Maintain high standards of customer satisfaction and technical delivery quality.

Qualifications & Skills

•

Bachelor’s degree in Information Security, IT, Computer Science, or equivalent experience.

•

Minimum 5+ years of experience in cybersecurity, information security, system integration, or related technical fields.

•

Minimum 3+ years of hands-on experience in SIEM, SOAR, security automation, or related security operations technologies.

•

Strong hands-on experience with Splunk SIEM, Palo Alto Cortex XSOAR, and Fortinet FortiSOAR, including architecture, implementation, integration, configuration, optimization, and troubleshooting.

•

Proven experience delivering SIEM and SOAR solutions in complex enterprise environments, including integration with multiple cybersecurity technologies and infrastructure platforms.

•

Experience integrating SIEM and SOAR platforms with various security products, infrastructure systems, threat intelligence sources, and IT service management platforms.

• Strong hands-on experience with Palo Alto Cortex XSOAR and Fortinet FortiSOAR, including playbook development, workflow automation, incident enrichment, automated response, and third-party security integrations.

• Experience with scripting, REST APIs, DevOps practices, and CI/CD pipelines.

•

Strong understanding of enterprise networking, cybersecurity architecture, and security operations.

•

Experience troubleshooting complex technical issues across multiple integrated technologies.

• Experience handling enterprise technical support tickets, incident troubleshooting, root cause analysis, vendor escalations, and complex technical issues.

• Experience working with customers, security operations teams, infrastructure teams, vendors, and internal technical stakeholders.

•

Experience working for a cybersecurity services provider, systems integrator, MSS provider, or IT consulting organization is highly preferred.

• Strong experience with Splunk Enterprise and Splunk Enterprise Security (ES), including distributed architecture, Search Heads, Indexers, Forwarders, log ingestion, parsing, field extraction, SPL, correlation searches, dashboards, and security monitoring use cases.

• Strong understanding of DevSecOps and Security Automation, including Python, PowerShell, Bash, API integration, Git, Azure DevOps, CI/CD pipelines, and automation frameworks.

• Experience with high availability, scalability, resiliency, and Disaster Recovery (DR) design and implementation for enterprise SIEM and SOAR environments.

• Strong networking knowledge, including TCP/IP, routing, switching, BGP, OSPF, DNS, NAT, VPN, firewalls, and SSL/TLS.

• Good understanding of enterprise identity and authentication technologies, including Active Directory, Entra ID, SAML, SSO, OAuth, and MFA.

• Experience with Microsoft Azure, AWS, OCI, and hybrid cloud environments, including cloud infrastructure, networking, security monitoring, and integration.

• Good understanding of OT Cybersecurity, including industrial network architectures, IT/OT segmentation, and security monitoring requirements.

• Strong troubleshooting skills across SIEM, SOAR, networking, cloud infrastructure, security integrations, automation workflows, and application layers.

• Ability to develop and review HLDs, LLDs, implementation plans, integration documents, test plans, troubleshooting procedures, SOPs, and technical diagrams.

• Additional experience with Cribl, Palo Alto Cortex XDR, OPSWAT, Proofpoint Email Security, Tenable, and F5 NGINX will be considered an advantage.

• Strong customer-facing, communication, presentation, documentation, and organizational skills, with the ability to work effectively in complex enterprise environments.

• Ability to independently deliver complex cybersecurity implementations and coordinate technical activities with customers, vendors, Professional Services, MSS, and Support teams.

• Flexible working approach, with the ability to manage multiple assignments, proactively identify areas for improvement, and continuously develop technical capabilities.

• Ability to produce technical designs, SOPs, test plans, and implementation documents.

• Strong analytical, problem-solving, documentation and presentation skills

• Excellent written and spoken English. Arabic language skills are considered an advantage.

Benefits

• Health insurance with one of the leading global providers for medical insurance.

• Career progression and growth through challenging projects and work.

• Employee engagement and wellness campaigns activities throughout the year.

• Excellent learning and development opportunities.

• Annual Flights Tickets.

• Inclusive and diverse working environment.

• Flexible/Hybrid working environment.

• Open door policy.

About Us

Help AG, the cybersecurity arm of Etisalat, is the Middle East's trusted cybersecurity partner, enabling governments, enterprises and critical industries to innovate with confidence. Combining strategic consulting, advanced managed security services and deep technology expertise, Help AG helps organisations strengthen cyber resilience, secure AI adoption and build trusted sovereign digital environments. With regional expertise and a customer-first approach, Help AG delivers end-to-end cybersecurity capabilities designed to protect critical operations, manage evolving risks and support secure digital transformation. Through continuous innovation, trusted partnerships and measurable outcomes, Help AG enables organisations to remain resilient, prepared and confident in a complex digital world.