Description

Lead the migration and implementation of a modern SaaS-based SIEM platform, overseeing log onboarding, detection engineering, and SOC transition.

This role is on-site.

Responsibilities

• Lead SIEM implementation and migration activities, including log source cutover and operational readiness.
• Design log collection, parsing, normalisation, and correlation architecture for diverse enterprise telemetry.
• Develop detection content, correlation rules, dashboards, and security analytics aligned with MITRE ATT&CK.
• Write complex SIEM queries for investigations, threat hunting, and reporting.
• Onboard endpoint, firewall, DNS, identity, cloud, DLP, proxy, email, and application logs.

Required Skills

• 10+ years of SIEM Engineering, Security Monitoring, or Detection Engineering experience.
• Proven experience leading enterprise SIEM migrations or greenfield deployments.
• Hands-on expertise with one or more major SIEM platforms.
• Strong proficiency in SIEM query writing, dashboard development, and correlation rule creation.
• Scripting and automation experience with Python, PowerShell, and APIs.
• Experience integrating and onboarding diverse enterprise security telemetry sources.
• Strong understanding of MITRE ATT&CK and threat detection methodologies.

Preferred Skills

• Experience with SaaS-based SIEM solutions.

Key Skills

Education

Any Graduate