SIEM Engineer

Responsibilities:

• Support and monitor SIEM platforms such as Splunk, QRadar, or ArcSight.
• Assist with onboarding and monitoring security logs from servers, applications, networks, and security tools.
• Develop basic SIEM queries, alerts, dashboards, and security reports.
• Investigate security events, troubleshoot detection issues, and help reduce false positives.
• Support SOC teams with security monitoring, alert investigation, and incident response.
• Assist with testing, tuning, documentation, and continuous improvement of security monitoring processes.

Requirements:

• Hands-on experience with Splunk, QRadar, ArcSight, or another SIEM platform through work, internships, labs, or projects.
• Basic understanding of security logs, events, and log monitoring.
• Familiarity with SPL, AQL, or equivalent SIEM query languages.
• Understanding of basic security alerts, correlation rules, and dashboards.
• Basic knowledge of SOC operations, security monitoring, and incident response.