SIEM Security Technician

Link to apply for job- https://www.jobs.global.fujitsu.com/job/Security-Technician/11384-en\_US/

Job Description -

• Administer and maintain the SIEM platform to ensure high availability and optimal performance.

• Configure, onboard, and normalize logs from various security devices and applications.

• Develop, modify, and optimize SIEM correlation rules, dashboards, reports, and alerts.

• Perform SIEM health checks, capacity planning, and performance tuning.

• Troubleshoot log collection, parsing, and indexing issues.

• Integrate security technologies including:

• Firewalls

• IDS/IPS

• Endpoint Detection & Response (EDR)

• Antivirus solutions

• Email Security Gateways

• Active Directory

• DNS

• Proxy Servers

• Cloud Security platforms

• Work closely with SOC Analysts to improve detection capabilities and reduce false positives.

• Monitor SIEM infrastructure, storage utilization, EPS (Events Per Second), and system performance.

• Implement log retention and archival policies in accordance with compliance requirements.

• Perform SIEM platform upgrades, patching, backup, and disaster recovery activities.

• Develop automation scripts where applicable using PowerShell or Python.

• Create and maintain operational documentation, SOPs, and knowledge articles.

• Participate in incident investigations by providing log analysis and technical support.

• Coordinate with infrastructure, application, and security teams for log source onboarding and issue resolution.

Required Technical Skills

• 5 to 10 years and Strong hands-on experience with one or more SIEM platforms:

• Microsoft Sentinel

• Splunk Enterprise Security

• IBM QRadar

• ArcSight

• LogRhythm

• Knowledge of Syslog, Windows Event Logs, CEF, JSON, XML, and API integrations.

• Strong understanding of TCP/IP networking, DNS, DHCP, VPN, and common security protocols.

• Experience with Kusto Query Language (KQL), SPL, or AQL based on the SIEM platform.

• Knowledge of MITRE ATT&CK framework.

• Understanding of security monitoring, threat detection, and incident response processes.

• Familiarity with cloud environments such as Microsoft Azure, AWS, or Google Cloud Platform.

• Experience with scripting using PowerShell, Python, or Bash.

• Strong analytical, troubleshooting, and documentation skills.

• Experience with SOAR platforms.

• Knowledge of Microsoft Defender XDR.

• Understanding of threat intelligence platforms.

• Experience with automation and orchestration.

• Familiarity with compliance standards such as ISO 27001, PCI-DSS, HIPAA, or NIST.

Certifications (Preferred)

• Microsoft SC-200
• Microsoft AZ-500
• CompTIA Security+
• GIAC Certifications
• Certified Information Systems Security Professional (CISSP)
• CEH (Certified Ethical Hacker)
• ECIH ( Incident Handler)