- 1.Experience in implementing end to end log management solution preferably on IBM Qradar, PaloAlto XSIAM & Google SecOps platform 2.Hands on experience on Event collector, Processor and console deployments 3.Strong Knowledge on custom property extraction and writing parsers for all unsupported log sources 4.Ability to resolve L2 / L3 technical issues and hands on experience for Upgrading the SIEM components 5. Strong knowledge and hands on experience on RHEL & Windows
Responsibility
- 1 Day to day Operations support for SIEM solution
- 2 Proving L2/L3 troubleshooting for the Log management platform
- 3 Implement and onboard new log sources, and write parsing for unsupported log sources
- 4 Ability to learn and adapt current technologies in SIEM integration