SIEM Admin - Qradar/ Arcsight

Job Title: SIEM Admin Engineer

Job Description: CyberGate Defense, a leading cybersecurity company, is seeking a SIEM Admin Engineer with 4 - 6 years of experience to join our team. The successful candidate will be responsible for the administration of SIEM Tools and developing custom parsers.

Responsibilities:

1. Deep knowledge of QRadar/Arcsight; other SIEM technology expertise also helpful.
2. Security operations experience such as incident management, intrusion detection, firewall deployment, and security event analysis.
3. Experience with security devices and general IT installations, configuration, and troubleshooting (e.g., Firewall, IDS, etc.).
4. Development of custom parsers, Use Cases, and fine-tuning the Use Case based on the inputs from the SOC team.
5. Handle day-to-day activities required to achieve and maintain SIEM operations.
6. Perform upgrades on the QRadar/Arcsight SIEM components.
7. Deploy new Console, Event Processor, Data Node & Collector as required to collect data feeds.
8. Investigate and debug alerts generated in the console.
9. Review configurations for potential security weaknesses.
10. Develop content including rules, reports, and dashboards.
11. Perform QA (Quality Assurance) function on content developed by other parties.
12. Health checks that need to be performed on the SIEM.

Qualifications: Excellent communication and customer interaction skills.

Benefits:

• Tax-free Salary
• Family Medical Insurance