Description

You will focus on developing detection capabilities within an ELK-based SIEM environment following a migration from Splunk.

Responsibilities

• Develop and implement SIEM detection rules within the ELK stack.
• Build and maintain security dashboards for visibility.
• Assist the team in transitioning security logic from Splunk to Elasticsearch.
• Support the ongoing development of the SIEM detection rule library.

Required Skills

• 5+ years of experience working with ELK (Elasticsearch, Logstash, Kibana).
• Deep expertise in creating and tuning SIEM detection rules.
• Hands-on experience with Splunk.
• Ability to work in a remote capacity.
• Bachelor's degree or equivalent experience.

Key Skills

Education

Any Graduate