Description

Administer and operate the RSA Netwitness SIEM platform, managing hardware, storage, and virtualization components. Evaluate system performance, log ingestion, and packet ingestion to assess current system state. Troubleshoot and resolve systemic issues within the Netwitness ecosystem and supporting infrastructure.

Responsibilities

• Design and present technical documentation, including status reports, upgrade suggestions, and project plans for the CSOC Engineering Team.
• Manage SIEM project duties such as creating project plans, change tickets, and coordinating with vendors.
• Maintain and update technical literature and architecture documentation as systems evolve.
• Collaborate with internal stakeholders, including network, application, and database teams.

Required Skills

• 3+ years evaluating and reviewing SIEM platform capabilities and benchmarking hardware.
• 3+ years designing and presenting technical documentation and project plans to engineering teams.
• 3+ years collaborating with internal stakeholders (network, application, database).
• 3+ years performing project management duties, including change tickets and vendor coordination.
• 3+ years reviewing and editing technical documentation for clarity and relevance.
• Netwitness XDX Specialist Administrator Certification.
• Experience with CSOC operations and strategic objectives.

Preferred Skills

• 5+ years with RSA Netwitness SIEM platform installation, configuration, and maintenance.
• 5+ years performing steady-state operation, tuning, and optimization using Netwitness Health and Wellness features.
• 5+ years with data parsing and normalization using regular expressions, Python, or Perl.

Key Skills

Education

Any Graduate