- Enterprise SIEM Architect exposure. Multiple SIEM deployement experience. SOC Domain Specialized.
- Excellent knowledge of one of the SIEM products, Qradar Sentinel, Splunk, ArcSight, etc.
- Excellent understanding and proven hands-on experience in SIEM concepts such as correlation, aggregation, normalization, and parsing
- Experience with Incident response and Security Operations Center operations
- Experience with deploying and managing a large SIEM deployment
- Excellent understanding of enterprise logging standards, with a focus on application logging
- 6 years of experience with Sentinel SIEM systems
- Excellent knowledge of adversary tactics, techniques and procedures (TTPs) and MITRE ATT&ACK; Framework
- Excellent understanding of regular expressions, development of custom/flex Parsers