SIEM Engineer

Job Summary

To enhance security operations, the part-time SIEM Engineer will design, deploy, maintain, and optimize the Security Information and Event Management platform while collaborating with various teams to ensure effective threat detection and compliance reporting.

Key responsibilities

• Design and maintain the organization's SIEM platform, ensuring effective collection and analysis of security telemetry
• Develop correlation rules, dashboards, and alerting logic to support the SOC in detecting threats
• Collaborate with SOC analysts and other teams to improve detection coverage and maintain platform performance

Required qualifications

• Deep knowledge of SIEM architecture, log management, and security monitoring
• Experience with large-scale SIEM platforms and various security logs, including cloud and endpoint telemetry
• Strong analytical skills with proficiency in query languages and data normalization
• Experience in developing use cases and optimizing performance within security operations
• Familiarity with threat intelligence integration and compliance reporting requirements