Description

You will design, implement, and maintain the logging infrastructure, focusing on syslog-ng, SIEM integration, and log pipeline performance.

This role is on-site.

Responsibilities

• Design and manage syslog-ng configurations for log collection, filtering, routing, and parsing.
• Monitor and optimize log pipeline performance, addressing CPU, memory, throughput, and latency issues.
• Troubleshoot log ingestion problems, including message drops, duplication, and network connectivity errors.
• Configure secure log transmission using TLS and maintain integration with SIEM platforms like Splunk, ELK, and Securonix.
• Perform capacity planning, performance tuning, and create validation frameworks for syslog configurations.

Required Skills

• 4-7 years of experience in System Administration, SIEM, or Log Management.
• Strong hands-on expertise with syslog-ng administration and troubleshooting.
• Experience with SIEM platforms such as Splunk, ELK Stack, or Securonix.
• Proficient in Linux/Unix system administration and log analysis.
• Deep understanding of TCP/IP, TLS, and networking protocols.
• Proven ability in performance tuning and operational support of large-scale logging environments.

Preferred Skills

• Experience with Securonix or specialized log management tools.
• Strong analytical and problem-solving skills for complex infrastructure issues.

Key Skills

Education

Any Graduate