What you'll  do:

• Handle the entire lifecycle of the SIEM and other security solutions, including design, deployment, integration, configuration, monitoring, and optimization, to support and enhance overall security services and operations.
• Design, size, deploy, configure, and maintain SIEM and other security solutions, such as Google SecOps, Cortex XSIAM...Etc., to meet specific customer needs, ensuring scalability, performance, and high availability while monitoring system performance for reliability.
• Integrate a wide range of data sources, including network devices, servers, applications, and cloud environments, into the SIEM system.
• Conduct proof-of-concept (POC) evaluations for various technology solutions, including but not limited to MSSP platforms and other security solutions.
• Create parsers for various log formats to facilitate accurate data ingestion and analysis.
• Design and implement use cases and detection rules to identify and respond to security threats effectively.
• Build out use cases based on attack trends, industry standards & customer requirements.
• Configure SIEM components, including log collection, correlation rules, dashboards, and alerts.
• Troubleshoot and resolve issues related to SIEM operations and data ingestion.
• Utilize scripting languages such as Python, PowerShell, or Bash for automation and customization tasks.
• Deploy and manage infrastructure components on AWS, Azure, or GCP.
• Partner with SOC teams and cloud engineers to design, implement, and maintain a robust cloud security operations environment.
• Develop and automate cloud security monitoring and alerting to ensure timely detection of security events.
• Develop and document Standard Operating Procedures (SOPs) for SIEM processes and integrations.
• Establish and maintain best practices for SIEM processes, considering compliance and security standards.
• Interact with customers to understand their requirements and provide technical support and solutions.
• Track tasks and challenges, ensuring timely resolution and effective communication of progress.
• Demonstrate self-initiative and take proactive measures to improve SIEM operations and capabilities.
• Serve as a subject matter expert (SME) for SIEM and other security solutions, advising internal operations teams on how to utilize specific features to effectively solve security challenges and optimize system performance.
• Show a strong passion for continuous learning and staying updated with the latest security technologies and trends.
• Provide training and support to team members on SIEM features and best practices.

What makes you a great fit:

• Bachelor’s or master’s degree in computer science, Cybersecurity, or equivalent experience in related field.
• 10+ years professional experience managing and maintaining SIEM systems.
• Hands-on experience with Minimum 2 SIEM Platforms in any of the following Cortex XSIAM, Google SecOps, Microsoft Sentinel, Splunk, Qradar, LogRythm, Elastic SIEM..etc
• Proven experience in cloud infrastructure management and security practices with MSSP services provider.
• Exhibit strong hands-on experience with Linux and Windows operating systems
• Work independently with minimal supervision while effectively collaborating with team members to achieve common goals.
• Good to have experience with DevOps like managing CI/CD pipelines within Kubernetes and Docker environments, with a strong understanding of container orchestration, automation tools, and infrastructure as code (IaC) methodologies.
• Certified Ethical Hacker (CEH)
• SIEM-specific certifications or vendor-specific certifications
• Cloud Infra & Security Certifications (AWS/Azure/GCP