Description

You manage the end-to-end administration and operations of the SIEM Security Analytics Platform and related security infrastructure.

Responsibilities

• Onboard new log sources, enable use cases, and support existing security workflows.
• Manage the log management environment, including data ingestion from on-premise and cloud devices.
• Develop custom parsers using regex to ensure proper data normalization and preparation.
• Drive platform upgrades, migrations, and patches while performing root cause analysis.
• Monitor internal logs to identify performance issues and triage device outages.

Required Skills

• 5+ years of experience in SIEM management, preferably with Splunk or ArcSight.
• Hands-on experience with Linux and database systems including MySQL and Oracle/SQL.
• Proficiency in Python and Shell scripting for automation.
• Deep understanding of end-to-end data flows and Syslog log management.
• Strong knowledge of OS, Proxy, Network, Application, and Cloud logs.
• Expertise in developing custom regex parsers for data ingestion.
• Proven ability to optimize SIEM performance and troubleshoot complex outages.

Preferred Skills

• Degree or Diploma in Computer Science, IT, Cyber Security, or Engineering.

Key Skills

Education

Any Graduate