Description

You will build and maintain detection capabilities within an ELK-based SIEM environment, supporting the transition from Splunk.

This role is remote.

Responsibilities

• Develop and implement SIEM detection rules within the ELK stack.
• Build and maintain security dashboards for operational visibility.
• Assist in transitioning security logic from Splunk to Elasticsearch.
• Support the ongoing development of the SIEM detection rule library.

Required Skills

• 5+ years of experience working with ELK (Elasticsearch, Logstash, Kibana).
• Deep expertise in creating and tuning SIEM detection rules.
• Hands-on experience with Splunk.
• Ability to work in a remote capacity.
• Bachelor's degree or equivalent experience.

Key Skills

Education

Any Graduate