SIEM Engineer

Required Technical Skill Set

• Ability to gather and understand Security requirements for use case/detection rule creation
• Expertise in creating and modifying detection rules, correlation rules and alerting mechanisms.
• Skills in fine-tuning and optimizing use cases/detection rules for performance and accuracy.
• Deep understanding of cybersecurity principles, threats and mitigation techniques.
• Strong skills in analyzing security data and logs to identify patterns and anomalies.
• Strong understanding of log collection, normalization and analysis.

Competencies (Technical/Behavioral Competency)

Must-Have

• Experience configuring SIEM platforms
• Proficiency in various OS environments such as Windows, Linux and Unix.
• Ability to configure log sources, parse logs and understanding correlation rules.
• Familiarity with Cyber Kill Chain and MITRE ATT&CK Framework and how to leverage in Security Operations
• Familiarity with ETL solutions
• Understanding of network architecture and network security fundamentals.
• Proficiency in scripting languages (e.g., Python, Bash, PowerShell)

Good-to-Have

• Certified in Security +, Splunk Certified Phantom Admin, IBM Certified Deployment Professional, Cortex XSOAR Engineer, Azure Security Engineer or any other SOAR/ Cloud related Certifications.
• Previous experience in a Security operations or similar environment.

Responsibility of / Expectations from the Role

1

2

3

4

5

6

7

8

9