Siem Administrator

As a SIEM Administrator, your role involves overseeing the implementation, management, and optimization of SIEM solutions within an organization's cybersecurity infrastructure.Responsibilities:Install, configure, and maintain SIEM platforms and associated software. This includes setting up data collection agents, configuring data sources, and defining log collection policies.Should have knowledge in new SIEM Implementation and deployment with DC-DR, HA setup and configurations [Mainly Qradar SIEM].Should coordinate with Engineering Lead and ensure the SIEM projects are delivered on time, and in-line with Customer expectation and best practices.Excellent understanding and proven hands-on experience in SIEM concepts such as correlation, aggregation, normalization, and parsing.Experience in SIEM Version Upgrade, Patch Upgrade, Win Collect Version Upgrades.Must have proven experience in Log Sources Integration & Troubleshooting.Strong skill set in custom log sources integration & parser development.Should perform regular health checks and maintain the SIEM platform effectively.Should have work experience in UBA & Rules and Tuning of UBA app.Experience in Use Case conceptualization, configuration & testing.Standardizing Use Cases and make it applicable for all customers.Responsible for Apps Installation, Troubleshooting & App host Management.Understanding about threat scenarios, threat vectors and logs to arrive at identify new threats.