Security Information and Event Management Engineer

Job not on LinkedIn

🕒 March 31

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TechBiz Global

WebsiteLinkedInAll Job Openings

51 - 200 employees

🎯 Recruiter

Recruitment • Software Development • Consulting

TechBiz Global is a leading recruitment and software development company that specializes in connecting businesses with top-tier talent across 28+ countries. They serve clients from startups to major enterprises, providing expertise in hiring key roles in industries such as FinTech. In addition to talent acquisition, TechBiz Global offers comprehensive software development services to turn clients' visions into reality, powering digital transformations with expert engineers. The company also provides strategic CTO consulting services and flexible outstaffing and outsourcing solutions, helping businesses manage growth and optimize technology processes. Recognized as a top IT recruitment and consulting firm, TechBiz Global is dedicated to delivering personalized and innovative solutions to its clients, ensuring they have the tools necessary for success.

📋 Description

• Design, deploy, and configure SIEM solutions, including Elastic Stack (Elasticsearch, Logstash, Kibana), Wazuh, QRadar, Splunk & Microsoft Sentinel. • Integrate various log sources (e.g., firewalls, IDS/IPS, network devices, applications),/OT/IOT into the SIEM platform. • Develop and fine-tune correlation rules, dashboards, and alerts for proactive threat detection. • Perform system upgrades, patches, and manage the overall health of the SIEM environment. • Ensure proper log ingestion from multiple data sources, including Elasticsearch and Kibana, and troubleshoot any logging issues. • Maintain data retention policies, manage storage, and optimize SIEM performance. • Monitor and analyze system and security logs for anomalies, potential threats, or suspicious activities. • Configure and maintain Elasticsearch clusters for log storage and search functionality. • Utilize Kibana to create custom dashboards, visualizations, and reports for security monitoring. • Work with Logstash or other log shippers for effective data parsing and enrichment before SIEM ingestion.

🎯 Requirements

• 5-8 years of experience working in SIEM engineering and administration roles. • Proven expertise with SIEM platforms like QRadar, Splunk, Microsoft Sentinel, and Elastic Stack (Elasticsearch, Logstash, Kibana). • Experience in integrating and managing log sources from diverse systems and platforms. • Strong understanding of security incident detection, threat analysis, and response processes. • Proficiency in SIEM platform management, rule creation, and performance tuning. • Hands-on experience with Elastic Stack (Elasticsearch, Logstash, Kibana) for log management, search, and security monitoring. • Strong scripting abilities (e.g., Python, PowerShell, Bash) for automation. • Knowledge of security protocols, network traffic analysis, and intrusion detection systems. • Experience working with security frameworks such as MITRE ATT&CK, NIST, or CIS. • SIEM-related certifications (e.g., IBM QRadar Certified, Splunk Certified Architect, Elastic Certified Engineer) preferred. • Security certifications such as CISSP, CISM, or CEH are a plus. • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent experience).