Security Information and Event Management (SIEM) Engineer
RemoteFull-time5–8 yrsPosted open since feb 2025
Senior cybersecurity role at TechBiz Global GmbH. Needs 5–8 years and a B.Tech, B.E. or B.Sc. Remote.
About the role
We are seeking for client for a one month project highly skilled and experienced SIEM Engineer with 5-8 years of hands-on experience working on Security Information and Event Management (SIEM) tools such as QRadar, Splunk, Microsoft Sentinel, Elastic Stack (Elasticsearch, Logstash, Kibana), and other SIEM platforms.
What you'll do
- Design, deploy, and configure SIEM solutions, including Elastic Stack (Elasticsearch, Logstash, Kibana), Wazuh, QRadar, Splunk & Microsoft Sentinel
- Integrate various log sources (e.g., firewalls, IDS/IPS, network devices, applications),/OT/IOT into the SIEM platform
- Develop and fine-tune correlation rules, dashboards, and alerts for proactive threat detection
- Perform system upgrades, patches, and manage the overall health of the SIEM environment
- Ensure proper log ingestion from multiple data sources, including Elasticsearch and Kibana, and troubleshoot any logging issues
What you need
- SIEM
- Event management
- Splunk
- Python
- Elasticsearch
- PowerShell
Good to have
- CISSP
- CISM
- CEH
- Bash
- Firewalls
- IoT