Responsibilities:

Implement and maintain Security Information and Event Management (SIEM) solutions.
Monitor security alerts and incidents, analyze data, and respond to security events.
Investigate and analyze security incidents to identify root causes and recommend corrective actions.
Collaborate with cross-functional teams to ensure the security infrastructure aligns with business needs.
Configure and fine-tune Security Operations Center (SOC) tools for optimal performance.
Develop and maintain security documentation, procedures, and playbooks.
Stay updated on the latest cybersecurity threats, vulnerabilities, and industry best practices.
Conduct security assessments and audits, identifying potential risks and proposing mitigation strategies.
Participate in the development and implementation of security policies and procedures.
Provide guidance and support to junior SOC analysts.

Qualifications:

Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
Proven experience as a SIEM/SOC Engineer or in a similar role.
In-depth knowledge of SIEM solutions, such as Splunk, ArcSight, or QRadar.
Familiarity with security frameworks, standards, and compliance requirements (e.g., ISO 27001, NIST, GDPR).
Experience with intrusion detection and prevention systems (IDS/IPS).
Strong understanding of network protocols, firewalls, and other security technologies.
Proficiency in scripting languages (e.g., Python, Bash) for automation and analysis.
Knowledge of incident response procedures and best practices.
Relevant cybersecurity certifications (e.g., CISSP, GIAC) are a plus.
Excellent problem-solving and analytical skills.
Effective communication and collaboration skills.

SIEM / SOC Engineer