SIEM Administrator

Job Title: SIEM Administrator (FortiSIEM / Wazuh)

Experience: 3–7 years

Location: Vidyavihar, Mumbai

Work Mode: On-site only (No WFH)

Skill : Fortisiem , Wazuh , ELK

Responsibilities:

Manage and administer SIEM platforms (FortiSIEM / Wazuh).

Handle integration of devices, applications, security tools, and cloud platforms with SIEM.

Ensure system uptime, availability, and performance of the SIEM environment.

Perform upgrades, patching, backup, and recovery of the SIEM platform.

Monitor log ingestion pipelines and resolve parsing/collection issues.

Develop and maintain log parsers and normalization rules.

Write and optimize regex patterns for log extraction and field mapping.

Use scripting / vibe-coding (Python, Bash, PowerShell) to automate onboarding, maintenance, and health checks.

Manage storage, retention, and archival policies for SIEM data.

Maintain documentation for integrations, configurations, and operational procedures.

Coordinate with SOC and IT teams for platform support and issue resolution.