Description

You will architect, implement, and maintain SIEM infrastructure to ensure reliable log ingestion, parsing, correlation, and alerting across enterprise systems.

Responsibilities

• Develop and fine-tune detection content and analytics rules to identify suspicious activity across endpoints, networks, and cloud environments.
• Manage and enhance NDR and XDR platforms, integrating telemetry for end-to-end visibility.
• Integrate SIEM with SOAR pipelines to support rapid response and consistent case handling.
• Partner with SOC and Incident Response teams to improve alert fidelity and reduce false positives.

Required Skills

• 5+ years of experience in security engineering, detection engineering, or SOC architecture.
• Expert-level knowledge of SIEM platforms (Splunk), including onboarding, parsing, rule creation, and optimization.
• Strong understanding of detection engineering, attack chain mapping, and event correlation.
• Proficiency in Python and PowerShell for automation and scripting.
• Experience with SOAR, NDR, and XDR technologies.
• Knowledge of Cloud Security and MITRE ATT&CK frameworks.

Preferred Skills

• Experience with ExtraHop, Vectra, Cisco, or CrowdStrike platforms for NDR/XDR deployment and tuning.
• Familiarity with MITRE D3FEND, network security, endpoint telemetry, and identity-based detection.
• Certifications such as GCDA, GSOC, CompTIA CySA+, or Splunk Enterprise Security Certified Admin.

Key Skills

Education

Any Graduate