SIEM Engineer

Candidate should be able to :

Drive multiple simultaneous workstreams; manage schedules, risks, and issues with effective communication to the team, to senior management, and company executives.

Research and keep up to date on threat actors and new TTP.

Write incident reports and deliver presentations to key business partners as well as help define roadmaps.

Assist, manage, and mentor other cybersecurity team members on the team.

Convert complex scenarios into business requirements and then drive technical project specifications.

Apply data-driven insights to create business justifications and value propositions for proposed engineering investments.

Candidate should have :

Experience working with various technical departments to enhance threat detections of deployed SIEMs

Hands-on content(use case) development experience using 1 or more SIEM query languages (Splunk SPL, Kusto Query)

Experience managing teams of several cybersecurity analysts and / or consultants

Demonstrated ability to create and present executive level briefings

Proficiency in operating systems, database platforms, web technologies, firewalls, and programming languages

Strong verbal & written communication skills

Excellent root cause analysis skills

Experience with cloud environments(e.g., Azure, AWS, Google Cloud Platform, etc.) and, cloud security architecture

Understanding of the MITRE ATT&CK framework

Knowledge of information security standards (ISO, NIST, PCI, PIPEDA, GDPR, etc.)

Deep experience architecting, managing deployment, and operationalization of SIEM in client environments

Solid technical knowledge of Linux and Windows

5+ years hands-on experience with 1 or more of the following SIEM tools : Splunk Enterprise Security, ELK, Azure Sentinel

Strong critical thinking and group facilitation skills

Scripting experience with one or more of the following languages : Powershell, Bash, Shell, Python