Description

You will own the design, implementation, and management of security monitoring and logging systems to enhance threat detection and response.

Responsibilities

• Design, implement, and maintain SIEM solutions, integrating data sources from network devices, servers, applications, and cloud services.
• Develop and tune SIEM use cases, correlation rules, and alerts to detect potential security incidents.
• Collect, process, and analyze telemetry data to provide actionable security insights and develop visualization dashboards.
• Implement and manage logging infrastructure, enforcing policies to meet compliance and security requirements.
• Automate security monitoring and incident response processes using scripting tools.

Required Skills

• 6 to 10 years of experience in security operations, specifically focusing on SIEM integration and management.
• Hands-on expertise with Splunk, IBM QRadar, ArcSight, or Microsoft Sentinel.
• Proficiency in scripting and automation using Python or PowerShell.
• Experience with logging and telemetry tools such as ELK Stack, Fluentd, or Prometheus.
• Strong understanding of network protocols, operating systems, and security frameworks.
• Knowledge of security monitoring and incident response methodologies.
• Ability to work in a rotational shift environment.
• Any Graduate degree.

Preferred Skills

• CISM certification.

Key Skills

Education

Any Gradute