SIEM Engineer

Responsibilities

• Configure and support SIEM solutions such as Splunk, QRadar, or ArcSight.
• Onboard and monitor security log sources from servers, applications, networks, and security tools.
• Develop queries, alerts, correlation rules, dashboards, and security reports.
• Investigate and troubleshoot detection issues and help reduce false positives.
• Support SOC teams with monitoring, incident investigation, and security operations activities.

Requirements

• Hands-on experience with at least one SIEM platform.
• Experience with log onboarding, parsing, field extraction, or normalization.
• Familiarity with SPL, AQL, or equivalent SIEM query languages.
• Experience creating alerts, correlation rules, dashboards, or security reports.
• Basic understanding of SOC operations, security monitoring, and incident respon