SIEM Administrator

Overview: SIEM Administrator administering, maintaining, and optimizing the organization's Security Information and Event Management (SIEM) platform to ensure effective security monitoring, log management, and threat detection. The role focuses on onboarding log sources, developing and tuning correlation rules, supporting security monitoring, and enhancing the overall effectiveness of the Security Operations Center (SOC). Key Responsibilities: • Administer, configure, and maintain the SIEM platform to ensure high availability and optimal performance. • Integrate and onboard log sources from servers, endpoints, network devices, cloud services, and security solutions. • Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts to improve threat detection capabilities. • Monitor SIEM platform health, troubleshoot performance issues, and ensure continuous log collection and data integrity. • Perform log parsing, normalization, and validation to ensure accurate event correlation and reporting. • Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection accuracy. • Support SOC analysts by investigating SIEM-related issues and enhancing visibility into security events. • Generate security reports, dashboards, and metrics to support operational and management reporting. • Collaborate with security, infrastructure, and application teams to integrate new systems and improve monitoring coverage. • Support SIEM platform upgrades, maintenance activities, and implementation of new security use cases. • Maintain SIEM documentation, including log source inventory, correlation rules, and operational procedures. • Contribute to the continuous improvement of SIEM architecture, detection capabilities, and SOC monitoring processes. Talent Profile: • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field. • Proven experience of 3+ years in cybersecurity, including hands-on experience administering SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm, or similar enterprise SIEM solutions Job Nature: SITE, Project-Based. In addition to the monthly salary, SITE provides you these Benefits: • Social allowance. • Mobile allowance. • Medical Insurance employee, his/her family, and parents.

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field. Proven experience of 3+ years in cybersecurity, including hands-on experience administering SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm, or similar enterprise SIEM solutions.

Administer, configure, and maintain the SIEM platform to ensure high availability and optimal performance. Integrate and onboard log sources from servers, endpoints, network devices, cloud services, and security solutions. Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts to improve threat detection capabilities. Monitor SIEM platform health, troubleshoot performance issues, and ensure continuous log collection and data integrity. Perform log parsing, normalization, and validation to ensure accurate event correlation and reporting. Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection accuracy. Support SOC analysts by investigating SIEM-related issues and enhancing visibility into security events. Generate security reports, dashboards, and metrics to support operational and management reporting. Collaborate with security, infrastructure, and application teams to integrate new systems and improve monitoring coverage. Support SIEM platform upgrades, maintenance activities, and implementation of new security use cases. Maintain SIEM documentation, including log source inventory, correlation rules, and operational procedures. Contribute to the continuous improvement of SIEM architecture, detection capabilities, and SOC monitoring processes.