Group SIEM Engineer

KEY ACCOUNTABILITIES

• Administer and maintain SIEM and SOAR platforms, including configuration, tuning, and updates.
• Onboarding of Log sources into SIEM platform, enhancing our security monitoring capabilities.
• Develop and implement correlation rules to detect potential security threats as per threat landscape.
• Design, implement, and maintain SOAR solutions to automate incident response workflows.
• Collaborate with cross-functional teams to integrate SOAR with existing security tools and processes.
• Develop playbooks for incident response and ensure regular testing and updates.
• Provide recommendation for Security Use-cases and SOAR Playbooks creation and optimization for any new / existing systems.
• Analyse and integrate threat intelligence data in SIEM and SOAR to enhance detection capabilities and incident response.
• Stay current with emerging threats and vulnerabilities, integrating relevant intelligence into security practices.
• Create and maintain documentation for SIEM and SOAR configurations, procedures, and playbooks.
• Generate regular reports on security incidents, trends, and metrics for management review.
• Provide training and guidance to team members on SIEM and SOAR best practices.
• Document all incidents, investigations, and analysis activities accurately and thoroughly.

OTHER

QUALIFICATIONS, EXPERIENCE AND SKILLS

Knowledge and Experience

Soft Skills

Technical Skills

#LI-MP1