Description

You will design, implement, and manage security monitoring and logging systems to enhance threat detection and response capabilities.

Responsibilities

• Design, implement, and maintain SIEM solutions including Splunk, IBM QRadar, ArcSight, or Microsoft Sentinel.
• Integrate diverse data sources such as network devices, servers, applications, and cloud services into the SIEM.
• Develop and tune SIEM use cases, correlation rules, and alerts to detect security incidents.
• Manage telemetry and logging infrastructure using tools like ELK Stack, Fluentd, or Prometheus.
• Implement automation scripts to streamline monitoring and incident response processes.

Required Skills

• 5+ years of experience in security operations, SIEM integration, and telemetry management.
• Hands-on experience with Splunk, IBM QRadar, ArcSight, or Microsoft Sentinel.
• Proficiency with logging and telemetry tools such as ELK Stack, Fluentd, or Prometheus.
• Experience with scripting and automation using Python or PowerShell.
• Strong understanding of network protocols, operating systems, and security frameworks.
• Knowledge of security monitoring and incident response methodologies.
• Experience maintaining documentation for SIEM configurations and logging setups.
• Relevant certifications such as CISSP, CISM, GSOC, or SIEM-specific credentials.

Preferred Skills

• Familiarity with cloud security and DevSecOps practices.

Key Skills

Education

Any Graduate