SIEM Engineer at An IT Service Company

Responsibilities

• Support and monitor SIEM platforms such as Splunk, QRadar, and ArcSight.
• Onboard and monitor security logs from servers, applications, and networks.
• Create basic SIEM queries, alerts, dashboards, and reports.
• Investigate security events and troubleshoot detection issues.
• Support SOC teams with alert investigation and incident response.
• Assist with SIEM testing, tuning, documentation, and process improvements.

Preferred candidate profile

• Hands-on experience with Splunk, QRadar or other SIEM tools.
• Basic understanding of security logs, events, and monitoring.
• Familiarity with SPL, AQL, or similar query languages.
• Understanding of security alerts, correlation rules, and dashboards.
• Basic knowledge of SOC operations and incident response.