SIEM Administrator

About the role

The SIEM Administrator is responsible for administering, maintaining, and optimizing the organization’s Security Information and Event Management platform. This role ensures effective security monitoring, log management, and threat detection to support the Security Operations Center.

Key responsibilities

• Administer, configure, and maintain the SIEM platform for high availability and performance.
• Integrate and onboard log sources from servers, endpoints, network devices, cloud services, and security solutions.
• Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts.
• Monitor platform health, troubleshoot performance issues, and ensure continuous log collection.
• Perform log parsing, normalization, and validation for accurate event correlation.
• Fine‑tune rules and alert thresholds to reduce false positives.
• Support SOC analysts in investigating SIEM‑related issues.
• Generate security reports, dashboards, and metrics for operational and management reporting.
• Collaborate with security, infrastructure, and application teams to expand monitoring coverage.
• Assist with SIEM upgrades, maintenance, and new use‑case implementation.
• Maintain documentation of log sources, rules, and procedures.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Digital Forensics, or a related field.
• Minimum 3 years of hands‑on experience administering enterprise SIEM solutions.

Required skills

• Experience with Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm, or similar SIEM platforms.

What we offer

• Monthly salary plus social allowance.
• Mobile allowance.
• Medical insurance for employee, family, and parents.