Description

You will develop and maintain SIEM rules, alerts, and correlation logic to identify potential threats. This role focuses on automating log processing, optimizing detection accuracy, and integrating new log sources.

This role is on-site.

Responsibilities

• Develop and maintain SIEM rules, alerts, and correlation logic.
• Analyze security logs and events to identify potential threats.
• Write Python scripts to automate log processing and analysis.
• Create and optimize Regex patterns for log parsing and data extraction.
• Fine-tune detection rules to improve accuracy and reduce false positives.

Required Skills

• Experience with SIEM platforms and security monitoring.
• Strong knowledge of Python scripting.
• Hands-on experience with Regular Expressions (Regex).
• Good understanding of log analysis and incident management.
• Familiarity with security event correlation and alert management.
• Basic knowledge of Windows, Linux, and network logs.
• 5+ years of experience in SOC roles.

Preferred Skills

• Strong analytical and problem-solving skills.

Key Skills

Education

Any Graduate