SIEM Engineer

Key Responsibilities:

Develop and maintain Splunk correlation searches (alerts), dashboard and

reports

Develop and maintain security frameworks around correlation searches

(exclusion framework, increase vigilance framework, etc.)

Participate in the onboard process of new data as well as performing cleanup

and sanitization of incoming log sources and events

Update / Deploy Splunk technical add-on

More administration / Development tasks can be given if demonstrate good

technicality

Troubleshoot and resolve Splunk related issues

Skills:

Splunk (3-9 years) especially SPL writing

Good knowledge in networking principles

Good knowledge in system administration principles

Must be able to work independently as well as work as part of a fast-moving

team