We are seeking a skilled SIEM Implementation Engineer with a strong focus on next-generation SIEM platforms. The ideal candidate will have extensive hands-on experience implementing and onboarding these solutions to support robust security monitoring and incident response capabilities.
Key Responsibilities
- Lead the implementation and onboarding of SIEM solutions, primarily CrowdStrike Falcon and LogScale.
- Develop and maintain log source onboarding processes, ensuring accurate data parsing and normalization.
- Design and implement high-fidelity detection use cases based on security best practices and threat intelligence.
- Optimize the SIEM platform for performance, scalability, and stability.
- Reduce false positives and improve the quality of security alerts.
- Integrate various log sources, including cloud environments (AWS and Azure), using API integrations and automation scripting.
Skills and Qualifications
Technical Skills
- Proven hands-on experience with CrowdStrike Falcon and LogScale.
- Familiarity with other SIEM platforms, such as Splunk, IBM QRadar, or Microsoft Sentinel,
is an advantage.
- Proficiency in handling various log formats, including Syslog, JSON, CEF, and LEEF.
- Expertise in parsing techniques, including Regex and Grok.
- Experience with API integrations and automation scripting; Python or PowerShell preferred.
- Working knowledge of cloud environments, including AWS and Azure.
Security Knowledge
- Solid understanding of SOC operations and the incident response lifecycle.
- Familiarity with the MITRE ATT&CK; framework.
- Experience in threat detection and use case development.
Soft Skills
- Robust analytical and troubleshooting capabilities.
- Ability to perform effectively in high-pressure SOC environments.
- Excellent communication and stakeholder management skills.
Preferred Certifications
- CrowdStrike certifications (Falcon or LogScale).
- SIEM certifications (Splunk, QRadar, or Microsoft Sentinel).
- Relevant industry certifications, such as CEH, CISSP, or GCIA.