SIEM Engineer (Project Based)

We are Hiring: SIEM Engineer

Are you the person who makes sure the SOC never goes blind? We are looking for a highly skilled SIEM Engineer to join our advanced SOC team supporting a Next-Generation SOC (NG-SOC) transformation for a leading financial institution!

In this role, you won't just watch dashboards, you will architect and maintain the backbone that powers every detection, every investigation, and every decision our SOC makes. Your mission is to ensure our SIEM and Security Data Lake are fast, reliable, and fed with the right data, at the right time, every time.

Key Responsibilities:

Platform Implementation & Maintenance

• Implement, manage, and maintain the SIEM / Security Data Lake platform end-to-end.
• Onboard new log sources and perform parsing/normalization to ensure clean, structured data.
• Ensure platform availability and performance meet SOC operational demands 24/7.

Performance & Optimization

• Perform tuning and optimization of the SIEM system to maximize detection and search performance.
• Conduct capacity planning and scaling to keep pace with growing data volumes.
• Troubleshoot integration issues across diverse log sources and security tools.

Reporting & Visualization

• Build dashboards, visualizations, and SOC reports related to SIEM / Data Lake performance and health.
• Support SOC Analysts and Engineers with reliable data access for investigations and threat hunting.

Job Requirements & Qualifications

Experience & Track Record:

• Proven hands-on experience implementing and managing enterprise-grade SIEM platforms (Splunk preferred).
• Demonstrated experience in log source onboarding, data parsing, and normalization at scale.
• Experience working in financial services / banking environments is a strong advantage.

Technical Skills & Tools:

• SIEM Administration: Deep expertise managing Splunk (or equivalent) — from data ingestion to search head clustering.
• Data Engineering: Strong understanding of field extraction, data models, and log normalization.
• Infrastructure Management: Hands-on skills in capacity planning, performance tuning, and platform troubleshooting.
• Availability & Reliability: Experience ensuring high availability of security data platforms in 24/7 operational environments.

Preferred Professional Certifications (Highly Prioritized):

• Splunk Enterprise Certified Architect (required minimum)
• Splunk Certified Cybersecurity Defense Engineer or equivalent — a strong plus.

💼 Ready to protect our infrastructure and master cyber defense? Apply directly via the link below or reach out to our Talent Acquisition team.

#Hiring #CyberSecurityJobs #SplunkEngineer #SOCAnalyst #SIEM #IncidentResponse #InfoSec #TechCareers