siem engineer

Base-2 Solutions, LLC

<div><div><div><div><div>Required Security Clearance:
</div><div><b>Public Trust</b></div>
</div><div><div>City:
</div><div><b>Washington</b></div>
</div><div><div>State/Territory:
</div><div><b>District of Columbia</b></div>
</div><div><div>Travel:
</div><div><b>None</b></div>
</div><div><div>Potential for Teleworking:
</div><div><b>Yes</b></div>
</div><div><div>Schedule:
</div><div><b>Full Time</b></div>
</div><div><div>DoD 8570 IAT Requirement:
</div><div><b>None</b></div>
</div><div><div>DoD 8570 IAM Requirement:
</div><div><b>None</b></div>
</div><div><div>DoD 8570 IASAE Requirement:
</div><div><b>None</b></div>
</div><div><div>DoD CSSP Requirement:
</div><div><b>None</b></div>
</div><div><div>Last Updated:
</div><div><b>10/30/25 4:34 PM</b></div>
</div><div><div>Requisition ID:
</div><div><b>607185</b></div>
</div><div><div>US Citizenship Required?:
</div><div><b>Yes</b></div>
</div><div><div>Pay Range:
</div></div><div></div><div><div>Work Type:
</div><div><b>Hybrid (On-Site and Remote)</b></div>
</div><div><div>Referral Eligibility:
</div><div><b>Eligible</b></div>
</div>
</div></div><div><p><b><i>The position is fully remote, but candidates must be close enough to the HHS site in Washington, D.C., to obtain their PIV card.</i></b></p><p><b>
Job Description</b><br>
Base-2 Solutions is seeking a SIEM Engineer who will provide Splunk Engineering support to partner with security tools and infrastructure management teams to administer and manage the department's Splunk solution, facilitate data ingestion, analysis, correlation, and visualizations. The Splunk Engineer will enable our customer to fully deploy a Department Security Information and Event Management (SIEM) program utilizing Splunk Enterprise Security Tools.</p><p><b>
Responsibilities</b></p><ul><li>
Design and implement a technical infrastructure based on functional requirements for new and existing Splunk instances.</li><li>
Participate in requirements gathering, architecting, building, and supporting operational teams throughout the agency.</li><li>
Design and implement content management solutions to provide search, reporting, applications, and visualizations.</li><li>
Develop guidance on data analysis and reporting, including the use of machine learning models and complex data analysis.</li><li>
Maintain, upgrade, and operate Splunk systems while providing guidance and assistance across teams.</li><li>
Integrate automation, applications, and systems monitoring.</li><li>
Provide extensive knowledge of Splunk and educate the customer's Splunk users on search, reporting, and visualization development.</li><li>
Assist with Data Enrichment to improve reporting, search, and dashboard capabilities.</li></ul><p><b>
Required Qualifications</b></p><ul><li>
4+ years of SIEM/Cyber Security engineering experience, as evidenced by work history.</li><li>
Flexibility to meet any threat scenario 24/7/365 as mission dictates.</li><li>
Must be a US Citizen with an active DoD Public Trust Clearance.</li></ul><p><b>
Desirable Qualifications</b></p><ul><li>
Prefer candidate to possess one or more of the following certifications:<ul><li>
Certified Ethical Hacker (CEH) or other equivalent cyber certification(s)</li><li>
Splunk Core Certified Consultant</li><li>
Cribl Certified User</li><li>
Security Tool Certifications (e.g., Cisco, Palo Alto, etc.)</li></ul></li><li>
Experience integrating and using Automation tools (Ansible, Terraform)</li><li>
Experience with cloud-based technologies (AWS, Azure)</li><li>
Experience with NOC technologies and metrics</li><li>
Desire to learn advanced SOC methodologies using Splunk ES</li><li>
Experience with Security Orchestration, Automation and Response (SOAR) tools and technologies (e.g., Splunk Phantom, Ansible, Python, etc.)</li></ul>
</div><div><div><div><div><p><b>Pay &amp; Benefit Highlights</b></p>
<p><b>
Compensation</b></p>
<ul>
<li>Above market fixed salary or hourly pay.</li>
<li>Up to $10,000 bonus for each referral.</li>
<li>Additional bonuses for exceptional performance, assisting with business development and company growth.</li>
</ul>
<p><b>Health</b></p>
<ul>
<li>100% paid premiums for health insurance. Choose from over 80 gold-level medical plans from Aetna, CareFirst, Kaiser and UnitedHealthcare. Choose from PPO, EPO, POS, HMO, and HSA-compatible.</li>
<li>HSA and FSA options.</li>
<li>100% paid premiums for dental insurance.</li>
<li>100% paid premiums for vision insurance.</li>
</ul>
<p><b>Income Protection</b></p>
<ul>
<li>100% paid premiums for short-term disability.</li>
<li>100% paid premiums for long-term disability.</li>
<li>100% paid premiums for accidental death &amp; dismemberment.</li>
<li>100% paid premiums for life insurance with a $200,000 max benefit.</li>
</ul>
<p><b>Retirement</b></p>
<ul>
<li>8% company contribution to 401k with immediate vesting.</li>
<li>401k pre-tax and Roth options.</li>
</ul>
<p><b>Leave</b></p>
<ul>
<li>Up to 20 days of flexible paid time off (PTO).</li>
<li>11 days of paid floating holidays.</li>
</ul>
<p><b>Work-Life Balance</b></p>
<ul>
<li>Flexible work schedules including flex time and compressed work period.</li>
<li>Remote work including partial or fully remote (contract and project-dependent).</li>
</ul>
<p>View our detailed Pay &amp; Benefits</p>
<p><b>
Equal Opportunity Employer</b></p>
<p>
Base-2 Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</p></div></div></div></div></div><p></p>

SIEM Engineer

Concentrix

<div><div><div><p><b>Global Security
</b></p></div><div><div><div><b>Location</b></div>
<div>Gurugram, India</div></div></div><div></div><div><div><br>
</div><p>Job Title:</p>
SOC Engineering &ndash; Product &amp; Automation<p>
Job Description</p>
We are looking for a SOC Product &amp; Automation Engineer to join our CDOC Engineering team. The role will focus on SIEM engineering and SOAR automation, with hands-on expertise in Palo Alto XSIAM and XSOAR. You&rsquo;ll design and optimize automation playbooks, build SIEM detections, and work closely with MSS SOC and clients to deliver scalable, efficient security operations.<h3 class="jobSectionHeader"><b>
Job Title:</b><b> SOC Product &amp; Automation Engineer</b></h3><div><b>
Location:</b> On-site &ndash; Gurgaon, Cyber City<br>
<b>Experience Required:</b> 4&ndash;5 years<br>
<b>Department:</b> CDOC Engineering</div><h3 class="jobSectionHeader"><b>
Role Overview</b></h3><div>
We are seeking a skilled <b>SOC Product &amp; Automation Engineer</b> with 4&ndash;5 years of experience in <b>SIEM engineering</b> and <b>SOAR automation</b>. The role requires hands-on expertise in <b>Palo Alto XSIAM and XSOAR</b>, focusing on building, optimizing, and maintaining automation frameworks to enhance SOC operations. This is an <b>on-site position in Gurgaon (Cyber City)</b>, requiring close collaboration with CDOC Engineering and MSS SOC teams.</div><h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3><ul><li><div>
Design, build, and maintain <b>SIEM use cases</b> and detections within <b>Palo Alto XSIAM</b>.</div></li><li><div>
Develop, test, and manage <b>SOAR playbooks</b> and integrations in <b>XSOAR</b> to automate SOC workflows.</div></li><li><div>
Partner with MSS SOC and engineering teams to deliver automation for <b>incident response and threat management</b>.</div></li><li><div>
Support <b>POCs and client engagements</b>, ensuring solutions meet security and business requirements.</div></li><li><div>
Optimize existing automation to improve SOC efficiency and reduce manual workload.</div></li><li><div>
Provide <b>Level 3 engineering support</b> for automation-related escalations.</div></li><li><div>
Document automation processes, playbooks, and engineering standards for reuse and scalability.</div></li></ul><h3 class="jobSectionHeader"><b>
Required Skills &amp; Experience</b></h3><ul><li><div>
4&ndash;5 years of experience in <b>SIEM engineering</b> and <b>SOAR automation</b>.</div></li><li><div>
Strong hands-on expertise with <b>Palo Alto XSIAM and XSOAR</b> (mandatory).</div></li><li><div>
Proficiency in developing automation playbooks, integrations, and APIs.</div></li><li><div>
Knowledge of scripting languages such as <b>Python</b> or <b>JavaScript</b>.</div></li><li><div>
Strong understanding of <b>SOC operations, incident response, and threat detection workflows</b>.</div></li><li><div>
Familiarity with security frameworks (e.g., <b>MITRE ATT&amp;CK, NIST</b>).</div></li><li><div>
Excellent troubleshooting and problem-solving skills.</div></li></ul><h3 class="jobSectionHeader"><b>
Nice-to-Have</b></h3><ul><li><div>
Exposure to other SIEM/SOAR platforms (Splunk, QRadar, Sentinel, etc.).</div></li><li><div>
Experience in <b>Managed Security Services (MSS)</b> or client-facing SOC environments.</div></li><li><div>
Relevant certifications: <b>PCSCE, PCNSE, or equivalent</b>.</div></li></ul><h3 class="jobSectionHeader"><b>
What We Offer</b></h3><ul><li><div>
Opportunity to work on cutting-edge <b>XSIAM/XSOAR implementations</b>.</div></li><li><div>
Exposure to <b>global MSS clients</b> and enterprise security environments.</div></li><li><div>
Career growth in <b>SOC engineering, automation, and product development</b>.</div></li></ul><p>
Location:</p>
IND Gurgaon - Bld 14 IT SEZ Unit 1, 5th, 6th and 17th Flr<p>
Language Requirements:</p><p>
Time Type:</p>
Full time<p><b>
If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the </b><b>Job Applicant Privacy Notice for California Residents</b></p></div></div></div><div></div>

SOC Engineering – Product & Automation

Capgemini

<div><div><div><div><h2 class="jobSectionHeader"><b>Your role
</b></h2></div><div><ul><li>We're hiring for skilled and motivated <b>Splunk Engineer </b>across <b>PAN India </b>to join our team. The ideal candidate will have <b>6 to 10 years </b>hands-on experience with <b>Splunk Admin and Splunk ES </b>.
</li><li>Configure and maintain logging, parsing, and correlation rules across diverse platforms (e.g., firewalls, IDS/IPS, endpoints) to improve visibility and alerting.
</li><li>Partner with SOC analysts to enhance detection workflows and ensure comprehensive monitoring across systems, applications, and network environments.
</li><li>Work closely with SOC engineers, analysts, and other stakeholders to strengthen the organization&rsquo;s security posture.
</li><li>Define and articulate value-driven detection and response use cases in collaboration with project managers and cross-functional teams.
</li><li>Advise on log structure, custom ingestion, parser creation and validation, and use case development.
</li><li>Innovate integration strategies for security toolsets to enable automated discovery, remediation, and alerting, thereby improving security posture and operational efficiency.
</li><li>Implement automation within SIEM for detection and response processes to enhance threat identification efficiency and accuracy.
</li><li>Design, implement, and optimize detection mechanisms for known and emerging threats using SIEM tools, EDR, and other monitoring platforms.
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>Your profile
</b></h2></div><div><ul><li>Minimum 5 years of experience in SIEM content creation (alerts, reports, dashboards), including:
</li><li>At least 2 years on Splunk SIEM (with formal training).
</li><li>At least 1 year on Splunk or Azure Sentinel (with formal training).
</li><li>Minimum 5 years of experience with SIEM query languages such as Splunk SPL and KQL (Kusto Query Language).
</li><li>Strong communication and interpersonal skills.
</li><li>Bachelor&rsquo;s degree or higher, and/or at least two cybersecurity certifications.
</li><li>Experience in scripting languages such as PowerShell, Python, Node.js, Perl.
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>What you'll love about working here
</b></h2></div><div><ul><li>You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
</li><li>You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
</li><li>At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.</li></ul></div></div></div></div>

Splunk Engineer

help AG

<div><p>Help AG is looking for a talented and experienced Senior Security Engineer, specializing in Sentinel / Defender / Splunk who will be responsible for the creation of procedures, implementation of process development, and maintenance of security systems across client environments. The Security Engineer will work closely with Management, Senior Engineers, Threat Analysts, Solution Architects, other Security Engineers, and clients to complete high profile, critical services to existing Managed Security Service clients. This position is based out in Dubai, UAE and will be responsible for the administration, maintenance, and integration of Splunk, MS Azure Sentinel, Sentinel UEBA, AIP, Defender, CASB, ATA/ATP &amp; Intune for security operations technical engineering, assessment, and recommendations in the areas of real-time security, operational network &amp; identity management system, and applications systems security.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Design, implement, and support solutions with SIEM (preferably Sentinel) and Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 Advanced Threat Protection (O365 ATP), Microsoft Defender ATP, and their integrations used to deliver internet-scale intelligence and managed security products.</p></li><li><p>
Implement &amp; administer Microsoft Defender (ATP), Azure Cloud Access Security Broker &amp; Azure Threat Protection security products within customer environment Manage and oversee day-today activities of Azure IP platform and ensure adherence to enterprise standards in project execution methodology, requirements gathering, quality assurance, and continuous improvement.</p></li><li><p>
Assess customer needs and expectations, design solutions to meet those needs, and then implement the design.</p></li><li><p>
Quickly build and solve a problem using a new technology to determine viability.</p></li><li><p>
Serve as a primary responder for Managed Security customer systems, taking ownership of client configuration issues and tracking through resolution.</p></li></ul><p></p><p><b>
Qualifications &amp; Skills</b></p><p></p><ul><li><p>
College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment.</p></li><li><p>
Experience and knowledge of Splunk, Azure M365 &amp; MS cloud security is essential.</p></li><li><p>
Security Engineer must possess minimum 5 years of professional experience &amp; Senior Security Engineer must possess minimum 7-8 years of professional experience supporting and maintaining Splunk, Azure M365 System.</p></li><li><p>
4-5 years of experience with administering &amp; managing Splunk and Sentinel SIEM including content development.</p></li><li><p>
Experience in Use cases creation and Content development on Microsoft Sentinel, Splunk SIEM.</p></li><li><p>
Experience in Custom Use cases, Dashboards, Report creation on Microsoft Sentinel, Splunk SIEM.</p></li><li><p>
Knowledge of Integration with tools, data connectors for Microsoft Sentinel, Splunk SIEM.</p></li></ul><ul><li><p>
Knowledge of Splunk, Sentinel architecture, tables and data in Sentinel.</p></li><li><p>
Knowledge of Sentinel workbooks and automation &amp; Splunk Enterprise Security.</p></li><li><p>
Professional experience working with networks and network architecture.</p></li><li><p>
Information security knowledge in one or more areas such as EDR &ndash; Enterprise end-point security products (e.g., McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption, etc.).</p></li><li><p>
Splunk, Azure Log analytics, or equivalent big data engine experience.</p></li><li><p>
Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.</p></li><li><p>
Knowledge of Linux and Windows Operating Systems.</p></li><li><p>
Experience with various other SIEM security products such as: Splunk, ArcSight, Nitro, or LogRhythm and infrastructure components such as proxies, firewalls, IDS/IPS, and DLP.</p></li><li><p>
Experience working with clients in a service delivery function.</p></li><li><p>
Shift flexibility, including the ability to provide after-hours support when needed.</p></li><li><p>
Experience working with internal and client ticketing and knowledge base systems for Incident and Problem tracking as well as procedure.</p></li></ul><p></p><p><b><br>
Benefits</b></p><p></p><ul><li><p>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Annual flight tickets to home country.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/hybrid working environment.</p></li><li><p>
Open-door policy.</p></li></ul><p></p><p><b>
About us</b></p><p></p><p>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p></p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.</p><p></p><p>
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Senior Security Engineer

Experian

<div><p><b>Job description</b></p><p></p><p><b><br>
Job Description</b></p><p>
Reporting to the Manager of Threat Detection Engineering, the Security Engineer will work with our teams, including cyber threat intelligence analysts, SOC analysts, threat detection engineers, server and network administrators, security tool administrators, and department customers. You will have information security experience in incident response and understanding of security log feeds mapping the data into the SIEM.</p><p>
You will:</p><ul><li>
Understand data feeds of multiple security tools and logs that feed the SIEM &amp; UEBA technologies. Identify capabilities and quality of these feeds and recommend improvements</li><li>
Create new content use cases based on threat intelligence, analyst feedback, available log data, and previous incidents</li><li>
Perform daily activities of the content life cycle, including creating new use cases, testing content; tuning, and removing content; and maintain associated documentation</li><li>
Improve vulnerabilities in the different application environments</li><li>
Work with the other security teams and product SMEs to identify gaps within the existing capability</li><li>
Develop parsers/field extractions to facilitate reliable content development</li><li>
Develop custom scripts to enhance default SIEM functionality</li><li>
Participate in root cause analysis on security incidents and provide recommendations for new data sources and enrichment</li></ul><p><b>
Qualifications</b></p><p>
Qualifications:</p><ul><li>
5+ years experience in security engineering or site reliability engineering</li><li>
Excellent Terraform<b> </b>skills required and experience with Cloud Migration</li><li>
Experience working with and developing CI/CD pipelines for Infrastructure as Code required</li><li>
Knowledge of programming/scripting fundamentals (python/golang) required</li><li>
Expertise in performing ETL onboarding for diverse log feed technologies required</li><li>
Experience supporting a Splunk platform administration, new content dashboards, applications, and use cases</li><li>
Hands-on experience developing Rest API's to capture data from external sources</li><li>
Experience with Agile methodologies</li><li>
Understanding of multiple log formats and source data for SIEM Analysis</li><li>
Solid background with Windows <i>and</i> Linux platforms (security or system administration)</li></ul><br>
<p></p>
<br>
<div>About Experian</div><br>
<p>Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them save time and money.</p><p>
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.</p><p>
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.</p><br>
<br>
<div>Experience and Skills</div><br>
<p><b>Qualifications</b></p><ul><li>
5+ years experience in security engineering or site reliability engineering</li><li>
Excellent Terraform skills required and experience with Cloud Migration</li><li>
Experience working with and developing CI/CD pipelines for Infrastructure as Code required</li><li>
Knowledge of programming/scripting fundamentals (python/golang) required</li><li>
Experience supporting a SIEM platform administration, new content dashboards, applications, and use cases</li><li>
Understanding of multiple log formats and source data for SIEM Analysis</li></ul><br>
<br>
<div>Additional Information<br>
</div><br>
<p>Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, collaboration, wellness, reward &amp; recognition, volunteering... the list goes on. Experian's people first approach is award-winning; World's Best Workplaces&trade; 2024 (Fortune Top 25), Great Place To Work&trade; in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why.</p><p>
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.</p><div></div><p>
Experian Careers - Creating a better tomorrow together</p></div><p></p>

Security Engineer

Al Adyat consultancy

<p>The <b>SIEM Administrator</b> is responsible for implementing, maintaining, and optimizing the Security Information and Event Management (SIEM) platform to ensure continuous monitoring, threat detection, and incident response across the organization&rsquo;s IT environment. This role involves managing SIEM configurations, integrating various log sources, developing correlation rules, and ensuring data integrity and performance. The SIEM Administrator works closely with SOC analysts, system administrators, and cybersecurity teams to enhance the organization&rsquo;s overall security posture.</p><p><b>Key Responsibilities:</b></p><ul><li><b>SIEM Platform Management:</b></li><li>Install, configure, and maintain SIEM tools (e.g., Splunk, IBM QRadar, ArcSight, Sentinel, LogRhythm).</li><li><b>3 years&rsquo; experience on Microsoft Sentinel and app logic.</b></li><li>Manage system health, performance tuning, and upgrades to ensure optimal operation.</li><li>Integrate diverse log sources from servers, firewalls, applications, cloud services, and endpoints.</li><li><b>Log Management and Correlation:</b></li><li>Define and implement log collection policies and normalization standards.</li><li>Develop and fine-tune correlation rules, alerts, and dashboards to detect potential threats and anomalies.</li><li>Validate and troubleshoot log ingestion issues to ensure complete visibility across systems.</li><li><b>Security Operations Support:</b></li><li>Collaborate with SOC teams to improve incident detection, analysis, and response processes.</li><li>Support incident investigations by providing detailed log analysis and event correlation.</li><li>Maintain incident response playbooks and automate repetitive detection tasks where possible.</li><li><b>Compliance and Reporting:</b></li><li>Ensure SIEM logging and monitoring align with compliance frameworks (ISO 27001, NIST, GDPR, etc.).</li><li>Generate regular reports and dashboards for management and audit purposes.</li><li>Document configurations, procedures, and change logs for audit readiness.</li><li><b>Continuous Improvement:</b></li><li>Research emerging threats and update SIEM detection content accordingly.</li><li>Evaluate and recommend enhancements to SIEM architecture and data sources.</li><li>Conduct periodic health checks and capacity planning for the SIEM environment.</li></ul><p><b>Qualifications and Skills:</b></p><ul><li><b>Education:</b></li><li>Bachelor&rsquo;s degree in computer science, Information Security, or a related field.</li><li>Master&rsquo;s degree or relevant certifications preferred.</li><li><b>Certifications (Preferred):</b></li><li>SIEM-specific certifications (e.g., Splunk Certified Administrator, QRadar Certified, Microsoft Sentinel).</li><li>Security certifications such as CompTIA Security+, CEH, CISSP, or GIAC.</li><li><b>Technical Skills:</b></li><li>Strong knowledge of log management, event correlation, and network protocols.</li><li>Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight, Sentinel, etc.).</li><li>Familiarity with firewalls, IDS/IPS, endpoint protection, and threat intelligence platforms.</li><li>Scripting knowledge (Python, PowerShell, or Bash) for automation and integration.</li><li>Experience with cloud environments (AWS, Azure, GCP) and their native security logging tools.</li><li><b>Soft Skills:</b></li><li>Strong analytical and problem-solving abilities.</li><li>Excellent communication and documentation skills.</li><li>Ability to work under pressure in a fast-paced security operations environment.</li><li>Attention to detail and commitment to maintaining system integrity and confidentiality.</li></ul><p><b>Experience Required:</b></p><ul><li>3&ndash;5 years of experience in cybersecurity, with at least 2 years focusing on SIEM administration or engineering.</li></ul><p>Experience working in a SOC or enterprise security environment is highly desirable.</p><p>Job Type: Full-time</p><p>Pay: QAR14,000.00 - QAR16,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>3 years&rsquo; experience on Microsoft Sentinel and app logic: 3 years (Required)</li><li>focusing on SIEM administration or engineering: 2 years (Required)</li><li>cybersecurity: 3 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in computer science, Information Security (Required)</li></ul>

SIEM Administrator – Cybersecurity

Hepsiburada (NASDAQ: HEPS)

<div>
 <p>
  At Hepsiburada, we are driven by our mission to improve people's lives by developing innovative products and services. Prioritizing customer satisfaction, we offer over 280 million products across more than 30 categories. Through our marketplace model, we bring together over 100,000 businesses. With T&uuml;rkiye&rsquo;s and the region's largest Smart Operations Center, industry-leading R&amp;D initiatives, and innovative solutions, we contribute significantly to the growth of the e-commerce ecosystem. For the past two years, we have proudly held the title of Turkey's most recommended e-commerce platform.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Through our innovative services like HepsiJET, Hepsipay, HepsiLojistik, HepsiAd, and Hepsiburada Global, we create value for all our stakeholders. Committed to harnessing technology for social benefit, our &ldquo;Technology Empowerment for Women Entrepreneurs&rdquo; program has connected thousands of women entrepreneurs with e-commerce, supporting their growth. Our goal is to leverage digitalization and e-commerce to enable greater economic participation.
 </p>
 <p>
  <br/>
 </p>
 <p>
  With 25 years of experience driven by innovation and entrepreneurship, we proudly continue our journey as &ldquo;T&uuml;rkiye&rsquo;s Hepsiburada&rdquo; and the first and only Turkish company listed on NASDAQ, the world's leading technology exchange.
 </p>
 <p>
  <br/>
 </p>
 <p>
  For our colleagues, we offer a work environment that supports creating together and adding more meaning to our work. As a team full of opportunities, we are happy to develop, produce and succeed together.
 </p>
 <p>
  <br/>
 </p>
 <p>
  If you want to be part of a team that creates value for everyone and makes life easier through innovative products and services&mdash;and contribute to exciting success stories&mdash;the future starts here.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Requirements:
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Installing, maintaining, and monitoring SIEM and SOAR platforms,
  </li>
  <li>
   Designing and enhancing Cyber Security Monitoring and Automation Infrastructure,
  </li>
  <li>
   Developing, tuning, and optimizing SIEM correlation rules, detection use cases, and automation playbooks,
  </li>
  <li>
   Integrating SIEM &amp; SOAR with Threat Intelligence, EDR, Cloud Security, and other security tools,
  </li>
  <li>
   Managing log source onboarding, parsing, and normalization (e.g., CIM, data models, field extractions),
  </li>
  <li>
   Automating SOC processes and designing SOAR workflows to improve efficiency and accuracy of alert handling, and integrating them with ticketing systems (e.g., ServiceNow, JIRA),
  </li>
  <li>
   Documenting processes, playbooks, and standard operating procedures,
  </li>
  <li>
   Ensuring scalability, performance, and health monitoring of SIEM environments.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Qualifications:
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree or equivalent experience in Computer Science, Engineering, or related field,
  </li>
  <li>
   2+ years of hands-on experience with SIEM &amp; SOAR platforms (Splunk and XSOAR experience highly preferred),
  </li>
  <li>
   Experience integrating SIEM/SOAR with multiple security technologies (EDR, FW, IDS/IPS, Cloud Security),
  </li>
  <li>
   Knowledge of cyber security frameworks such as MITRE ATT&amp;CK, NIST CSF, etc.,
  </li>
  <li>
   Experience with scripting languages (Python, PowerShell, etc.) for automation and integration,
  </li>
  <li>
   Proficiency in both Linux and Windows operating systems,
  </li>
  <li>
   Strong knowledge of core security concepts (access management, hardening, monitoring, etc.),
  </li>
  <li>
   Experience with log pipeline management and parsing (Regex, KQL, SPL),
  </li>
  <li>
   Experience with data enrichment, threat feed integration, and use of APIs in automation,
  </li>
  <li>
   Proactive, eager to learn, and open to new ideas,
  </li>
  <li>
   Team player with the ability to mentor and take initiative,
  </li>
  <li>
   Relevant certifications (Splunk Certified Admin/Architect, Palo Alto XSOAR, GIAC GCDA) are a plus.
  </li>
 </ul>
 <p>
 </p>
</div>


Cyber Security Engineer

Search 8185+ Siem engineer jobs near you this October. New roles added regularly across leading industries. Apply today.