SIEM Engineer

About the Role
We are seeking an experienced SIEM Engineer to join our team. This role focuses on the deployment, configuration, and management of Security Information and Event Management (SIEM) platforms, enhancing our security posture through effective monitoring and detection strategies. You will collaborate with Security Operations Center (SOC) and Incident Response teams to improve workflows and ensure proactive threat detection.

Key Responsibilities

• SIEM Implementation & Management: Deploy, configure, and maintain SIEM platforms such as Splunk, QRadar, ArcSight, and LogRhythm.
• Log Source Integration: Integrate diverse log sources, develop custom parsers, and tune rules for accurate detection.
• Detection Rules: Create, test, and optimize detection rules, correlation logic, and alerts based on threat models and business risks.
• Collaboration: Work closely with SOC and Incident Response teams to enhance investigative workflows.
• Automation & Scripting: Use Python, PowerShell, or similar scripting languages for automation, dashboard creation, and custom reporting.
• Threat Visibility: Improve monitoring coverage and ensure proactive detection of advanced threats.
• Documentation: Maintain technical documentation, detection playbooks, and compliance reports.

Requirements

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related discipline.
• Minimum 8+ years of experience in SIEM engineering, security monitoring, or SOC environments.
• Strong knowledge of SIEM platforms and log management.

Certifications

• Splunk Certified Architect.
• GCIA (GIAC Certified Intrusion Analyst).
• Equivalent SIEM/security certifications.