SIEM Engineer

Responsibilities:

• Monitor and support SIEM platforms such as Splunk, QRadar, or ArcSight.
• Onboard security logs from servers, network devices, and applications, and keep an eye on their health so nothing goes silent.
• Build basic SIEM queries, alerts, dashboards, and reports.
• Investigate security events and tune detections to cut down false positives.
• Support the SOC team with alert triage, investigation, and incident response.
• Help with SIEM testing, rule tuning, documentation, and ongoing improvements.

Requirements:

• Hands-on exposure to at least one SIEM platform, whether through a job, internship, home lab, or project.
• Basic understanding of security logs, events, and monitoring.
• Familiarity with a SIEM query language such as SPL (Splunk), AQL (QRadar), or similar.
• Understanding of how alerts, correlation rules, and dashboards work.
• Basic knowledge of SOC operations and the incident response lifecycle.