SIEM Administrator – Cybersecurity Operations

About the role

We are looking for a skilled SIEM Administrator to design, deploy, and maintain our Security Information and Event Management platform. You will be the backbone of our log management and threat detection infrastructure, working closely with business units to onboard log sources and build custom detection rules.

Key responsibilities

• Design, deploy, patch, and upgrade the SIEM platform and associated agents.
• Collaborate with business units to map network hierarchies, establish building blocks, and classify log sources for onboarding.
• Develop custom API connectors and parsers for non‑standard log sources.
• Create and tune detection rules, use cases, and MITRE ATT&CK models.
• Troubleshoot day‑to‑day issues across log sources, collectors, agents, and SOC tools.
• Manage data archiving, backups, retention, and purging to meet compliance standards.
• Handle change tickets for administrative tasks and prepare assessment reports.
• Perform Windows and Unix system administration to ensure infrastructure health.

Required profile

• Bachelor’s degree in a related field or equivalent professional experience.
• Strong understanding of cybersecurity, networking, operating systems, authentication protocols, enterprise architecture, and incident response.
• Familiarity with enterprise logging sources such as firewalls, Active Directory, EDR/antivirus, IDS/IPS, proxies, and cloud platforms.

Required skills

• Experience with SIEM solutions (e.g., Splunk, QRadar, LogRhythm, Microsoft Sentinel, Palo Alto XSIAM).
• Windows and Unix/Linux system administration.
• API development and custom parser creation.
• MITRE ATT&CK modeling and use‑case development.
• Knowledge of SOAR platforms (preferred).
• Understanding of data governance, archiving, backup, and retention policies.