Key Responsibilities:

– SIEM Implementation and Management: Design, implement, and manage SIEM solutions to monitor and analyze security event logs, detect threats, and respond to incidents.

– Cybersecurity Threat Detection: Develop and maintain threat detection rules, alerts, and dashboards to identify potential security threats.

– Incident Response: Collaborate with incident response teams to investigate and respond to security incidents, providing technical expertise and support.

– Security Monitoring: Continuously monitor security event logs, network traffic, and system activity to identify potential security threats.

– Compliance: Ensure SIEM solutions meet regulatory compliance requirements and industry standards (e.g., HIPAA, PCI-DSS, GDPR).

– Technical Collaboration: Work with cross-functional teams, including IT, development, and security operations, to ensure security solutions meet business needs.

Requirements:

– Technical Skills:

– Experience with SIEM solutions (e.g., Splunk, ELK Stack, IBM QRadar)

– Knowledge of cybersecurity threats, vulnerabilities, and attack vectors

– Familiarity with security frameworks and regulations (e.g., NIST, HIPAA, PCI-DSS)

– Strong understanding of network protocols, operating systems, and cloud security