SIEM Administrator

Job Overview

Seeking a SIEM Administrator responsible for managing, maintaining, and enhancing the organization's Security Information and Event Management (SIEM) platform. This role ensures robust security monitoring, efficient log management, and effective threat detection across various systems.

Key Responsibilities

• Manage and configure the SIEM system to guarantee high availability and peak performance.
• Onboard and integrate log sources from diverse systems such as servers, endpoints, network devices, cloud platforms, and security tools.
• Create, refine, and uphold correlation rules, detection scenarios, dashboards, and alert mechanisms to strengthen threat detection.
• Monitor system health, resolve performance issues, and ensure continuous, accurate log collection and data integrity.
• Conduct log parsing, normalization, and validation to support precise event correlation and reporting.
• Optimize SIEM rules and alert parameters to reduce false alarms and enhance detection precision.
• Assist SOC analysts by resolving SIEM-related challenges and increasing visibility into security events.
• Produce security reports, dashboards, and metrics that support operational and leadership insights.
• Collaborate with security, infrastructure, and application teams to integrate new systems and broaden monitoring scope.
• Support platform upgrades, routine maintenance, and the implementation of new security use cases.
• Maintain thorough documentation, including log source inventories, correlation rules, and operating procedures.
• Drive continual advancements in SIEM architecture, detection techniques, and SOC monitoring processes.

Candidate Profile

• Possess a Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a closely related discipline.
• Have at least 3 years of practical experience in cybersecurity with direct involvement in managing SIEM solutions such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm, or equivalent enterprise platforms.

Additional Details

• Employment is project-based under SITE.
• Benefits include social allowance, mobile allowance, and comprehensive medical insurance covering the employee, their family, and parents.