Security Information and Event Management (SIEM) Engineer
TechBiz Global
WorldwideremotePosted 1 month ago
Skill Required
SIEM-EngineeringCybersecuritySecurity-EngineeringInfosecSecurity-OperationsSecurity-Information-And-Event-Management-(SIEM)-SpecialistSIEM-Platform-Security-EngineerSIEM-EngineerInformation-Security-EngineerSIEM-AnalystSecurity-Operations-EngineerInformation-Systems-Security-EngineerSecurity-Analytics-EngineerSecurity-Monitoring-EngineerSenior-Information-Security-EngineerSecurity EngineersecuritySIEMandQuery Optimizationrelated fieldElasticsearchEngineeringanalyticalautomationShell ScriptingObservabilityFirewallPythondesignContract
Key highlights
- One-month client project
- 5-8 years of hands-on SIEM experience required
- Proficiency with Elastic Stack (Elasticsearch, Logstash, Kibana) required
- Scripting abilities (Python, PowerShell, Bash) required for automation
- Bachelor's degree in CS, IT, Cybersecurity, or equivalent experience required
- Security certifications (CISSP, CISM, CEH) are a plus
Role overview
TechBiz Global is seeking a highly skilled SIEM Engineer for a one-month client project. The role focuses on the design, deployment, configuration, and management of SIEM solutions, ensuring efficient monitoring and proactive threat detection across the organization. The engineer will collaborate with security teams to optimize incident detection, analysis, and response processes, with a strong emphasis on Elastic Stack and other leading SIEM platforms.
Responsibilities
- Design, deploy, and configure SIEM solutions, including Elastic Stack (Elasticsearch, Logstash, Kibana), Wazuh, QRadar, Splunk, and Microsoft Sentinel
- Integrate various log sources (e.g., firewalls, IDS/IPS, network devices, applications), OT/IoT into the SIEM platform
- Develop and fine-tune correlation rules, dashboards, and alerts for proactive threat detection
- Perform system upgrades, patches, and manage the overall health of the SIEM environment
- Ensure proper log ingestion from multiple data sources, including Elasticsearch and Kibana, and troubleshoot any logging issues
- Maintain data retention policies, manage storage, and optimize SIEM performance
- Monitor and analyze system and security logs for anomalies, potential threats, or suspicious activities
- Configure and maintain Elasticsearch clusters for log storage and search functionality
- Utilize Kibana to create custom dashboards, visualizations, and reports for security monitoring
- Work with Logstash or other log shippers for effective data parsing and enrichment before SIEM ingestion
Requirements
- 5-8 years of experience working in SIEM engineering and administration roles
- Proven expertise with SIEM platforms like QRadar, Splunk, Microsoft Sentinel, and Elastic Stack (Elasticsearch, Logstash, Kibana)
- Experience in integrating and managing log sources from diverse systems and platforms
- Strong understanding of security incident detection, threat analysis, and response processes
- Proficiency in SIEM platform management, rule creation, and performance tuning
- Hands-on experience with Elastic Stack (Elasticsearch, Logstash, Kibana) for log management, search, and security monitoring
- Strong scripting abilities (e.g., Python, PowerShell, Bash) for automation
- Knowledge of security protocols, network traffic analysis, and intrusion detection systems
- Experience working with security frameworks such as MITRE ATT&CK, NIST, or CIS
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience)
Nice to have
- SIEM-related certifications (e.g., IBM QRadar Certified, Splunk Certified Architect, Elastic Certified Engineer)
- Security certifications such as CISSP, CISM, or CEH
- Strong problem-solving and analytical thinking abilities
- Excellent communication skills to convey complex technical concepts to stakeholders
- Ability to work independently or in a team with minimal supervision
Additional details
- Company: TechBiz Global — a leading recruitment and software development company with headquarters in Germany and successful clients worldwide
- Offers IT recruitment, outstaffing, outsourcing, software development, and consulting services with a tech mindset
- Diverse, globally distributed team with hands-on experience with challenges of rapid growth and the IT sector
- Role: One-month project for a client
- Originally posted on Himalayas