Executive - SIEM Engineer

About the role

We are seeking a skilled professional for the role of Executive - SIEM Engineering, with 2-3 years of relevant experience in Security Information and Event Management, security monitoring, log management, and incident investigation within an enterprise environment.

What you'll do

• Administer and support the enterprise SIEM platform, preferably Splunk Enterprise/Splunk Cloud, ensuring platform availability, operational health
• Onboard and integrate logs from enterprise firewalls, network devices, servers, operating systems, endpoint security platforms, identity providers, cloud services
• Configure and maintain log collection, forwarding, parsing, field extraction, normalization, timestamp handling
• Develop, maintain, and optimize Splunk searches, correlation rules, alerts, dashboards, reports, and visualizations to support security monitoring and threat detection
• Monitor SIEM ingestion health, identify missing or delayed logs, investigate ingestion failures, and coordinate with respective technology teams to restore log visibility

What you need

• 2–3 yrs of experience
• SIEM
• Incident response
• Network security
• Vulnerability assessment
• Linux
• Splunk
• Any graduate

Good to have

• Python
• Shell scripting
• ServiceNow
• PowerShell
• Firewalls
• EDR