Lead the administration, optimization, scalability, and continuous improvement of the organization's SIEM and Splunk infrastructure, ensuring resilient security monitoring, advanced detection capabilities, platform performance, and operational excellence across enterprise environments.
Responsibilities:
- Ensure SIEM platform availability, performance, and operational stability.
- Lead troubleshooting and resolution of complex SIEM issues.
- Maintain dashboards, reporting, upgrades, and platform documentation.
- Lead Splunk infrastructure and SIEM administration activities
- Oversee log management, integrations, and monitoring enhancements
- Support SOC and Detection Engineering operational requirements
- Enhance SIEM scalability, resilience, and monitoring capabilities
- Drive SIEM optimization and automation initiatives
- Support continuous improvement of enterprise detection capabilities.
Experience and Job Specific Skills:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
- Should have 8–10 years of experience in SIEM administration, or Security Engineering.
- Advanced SIEM architecture and administration.
- Distributed SIEM infrastructure management.
- Advanced SPL query and dashboard development.
- SIEM tuning and performance optimization.
- Log parsing, normalization, and onboarding.
- SOAR, EDR/XDR, and threat intelligence integrations.
- Python, Bash, or PowerShell scripting.
- Infrastructure troubleshooting and root cause analysis.
- Storage, indexing, and retention optimization.
- Cloud and hybrid SIEM integrations.
- OT/IoT log monitoring concepts.
