Responsibilities

• Lead the technical operations and management of SIEM tools including Splunk, Sentinel, LogRhythm,Qradar and FortiSIEM.
• Oversee the maintenance and functionality of the log collection layer, with a focus on tools like CRIBL.
• Ensure the health and functionality of SIEM systems through regular checks and maintenance activities.
• Oversee and manage SIEM licenses, including forecasting, tracking usage, and coordinating with sales for estimations and renewals.
• Optimize SIEM telemetry to ensure efficient and accurate data collection, correlation, and reporting.
• Develop and enforce logging standards across all customers, systems and platforms to maintain consistent and reliable log data
• Provide guidance and mentorship to SOC Engineers in managing and resolving issues related to SIEM services and log management.
• Participate in pre-sales activities to provide technical expertise and estimation for SIEM licenses and architectures.
• Collaborate with SOC Engineering & Architecture Manager to develop SIEM architecture strategies and implement initiatives.
• Assist in continuous process improvements to increase SOC efficiency and effectiveness.
• Provide regular and accurate reporting on SIEM services, SOC operations, and license management to relevant stakeholders.
• 
  

Skills

• Extensive knowledge and hands-on experience with SIEM tools such as Splunk, Sentinel, LogRhythm, FortiSIEM, and log collection components like CRIBL.
• Proven technical leadership skills in a complex, fast-paced environment.
• Demonstrable pre-sales experience, particularly in estimating SIEM licenses.
• Strong understanding of SOC operations, cybersecurity principles, and best practices.
• Exceptional problem-solving skills and the ability to make decisions under pressure.
• Excellent mentorship and team development capabilities.
• High proficiency in written and verbal communication.
• 
  

Qualifications

Certifications:

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Splunk Certified Architect or similar SIEM certifications are a must.
• Cloud-related certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert.
• Networking certifications such as CCNA or CCNP are advantageous.
• 
  

Educational Experience

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• A minimum of 10 years of experience in SIEM and SOC operations, with significant experience in SIEM management and architecture.
• Prior leadership role experience within a SOC or similar cybersecurity environment.
• 
  

.