SIEM Engineer

Responsibilities

• Monitor and support SIEM platforms such as Splunk, QRadar, or ArcSight.
• Onboard and monitor security logs from servers, networks, and applications.
• Create basic SIEM queries, alerts, dashboards, and reports.
• Investigate security events and reduce false positives.
• Support SOC teams with alert investigation and incident response.
• Assist with SIEM testing, tuning, documentation, and improvements.

Preferred candidate profile

• Hands-on experience with any SIEM platform through work, internships, labs, or projects.
• Basic understanding of security logs, events, and monitoring.
• Familiarity with SPL, AQL, or similar SIEM query languages.
• Understanding of alerts, correlation rules, and dashboards.
• Basic knowledge of SOC operations and incident response.