Description

You will manage and operate the RSA Netwitness Platform to support CSOC operations.

This role is on-site.

Responsibilities

• Administer the RSA Netwitness SIEM platform, including hardware, storage, and virtualization benchmarking.
• Evaluate system performance and investigate log and packet ingestion processes.
• Design and maintain technical documentation, including status reports, upgrade suggestions, and project plans.
• Manage SIEM project duties, including change tickets, vendor communications, and short-term engagement tracking.
• Collaborate with CSOC engineering, network teams, and database administrators to align SIEM operations with strategic objectives.

Required Skills

• 3 years of experience evaluating and reviewing SIEM platform capabilities and system performance.
• 3 years of experience designing and presenting technical documentation and project plans to engineering teams.
• 3 years of experience interacting with internal stakeholders, including network, application, and database teams.
• 3 years of experience performing documentation reviews and technical literature revisions.
• 3 years of experience in basic CSOC SIEM project management and change ticket creation.
• Netwitness XDX Specialist Administrator Certification.

Preferred Skills

• 5 years of experience with RSA Netwitness SIEM Platform, including installation, configuration, and maintenance of servers and virtual machines.
• 5 years of experience with steady-state operation, tuning, and optimization using Netwitness Health and Wellness features.
• 5 years of experience with data parsing and normalization using regular expressions, Python, or Perl.

Key Skills

Education

Any Graduate