SIEM Engineer at An IT Service Company
Posted Updated
Summary
Junior SIEM engineer supporting and monitoring security platforms like Splunk, QRadar, and ArcSight: onboarding logs from servers, apps, and networks, building queries, alerts, and dashboards, and helping the SOC investigate security events and incidents.
Responsibilities
- Support and monitor SIEM platforms such as Splunk, QRadar, and ArcSight.
- Onboard and monitor security logs from servers, applications, and networks.
- Create basic SIEM queries, alerts, dashboards, and reports.
- Investigate security events and troubleshoot detection issues.
- Support SOC teams with alert investigation and incident response.
- Assist with SIEM testing, tuning, documentation, and process improvements.
Preferred candidate profile
- Hands-on experience with Splunk, QRadar or other SIEM tools.
- Basic understanding of security logs, events, and monitoring.
- Familiarity with SPL, AQL, or similar query languages.
- Understanding of security alerts, correlation rules, and dashboards.
- Basic knowledge of SOC operations and incident response.