SIEM Infrastructure Management

The SIEM Infrastructure Engineer is responsible for designing, implementing, and maintaining the infrastructure and systems that support SIEM platforms within an organization's cybersecurity environment. This role involves the management of security event logs, ensuring efficient data collection and analysis, and working with a team of cybersecurity professionals to provide actionable insights and protect the organization from potential security threats.

• Ability to perform the SIEM health Checks and remediate any anomalies observed (Preferably Cloud Based SIEM's)
• Troubleshoot SIEM platform issues and other SOC tools like Fire-Eye and Palo Alto XSOAR
• Data archiving and backup and data purging configuration as per need and compliance
• Good Knowledge on Service Now Tool for raising Change Mangement Requests on SOC Administration Activities as per ITIL Framework
• Building incident reports, advisories and review defined SLA's for Incident alerting and Incident closure
• Update all key process documents wherever required
• Creation of daily and weekly tracker sheet and submit to SOC manager for review
• Integrate various Log Sources and create custom parsers
• Logging level troubleshooting for Windows and Unix servers
• Raise OEM Support tickets for troubleshooting and resolution