SIEM Architect

About the Client:

An IT services company.

Role

Experience

Location

Role Summary:

• Design and Deployment:

  Design, deploy, and optimize Microsoft Sentinel SIEM solutions for managed security customers.

• Customer Consultation:

  Consult with customers to understand their security needs and develop tailored SIEM architectures.

• Threat Detection:

  Create and fine-tune detection rules, event correlation policies, and automated response mechanisms to enhance threat intelligence and incident response.

• Integration:

  Integrate SIEM with other security tools, including EDR, SOAR, and log management systems.

• Reporting:

  Develop and maintain dashboards, reports, and analytics to provide actionable security insights.

• System Maintenance:

  Perform regular system health checks on the SIEM to ensure high availability and apply necessary patches and updates.

• Collaboration:

  Collaborate with the Security Operations Center (SOC) and network security teams to improve detection and response capabilities.

• Training & Knowledge Sharing:

  Conduct training and knowledge-sharing sessions for internal teams and customers to maximize SIEM adoption and effectiveness.

• Continuous Improvement:

  Stay up to date with emerging threats, SIEM trends, and best practices to continuously improve security offerings.

• Troubleshooting:

  Provide expert-level troubleshooting and resolution support for complex SIEM-related issues.