About the role
Responsibilities:
- Monitor and support SIEM platforms such as Splunk, QRadar, or ArcSight.
- Onboard security logs from servers, network devices, and applications, and keep an eye on their health so nothing goes silent.
- Build basic SIEM queries, alerts, dashboards, and reports.
- Investigate security events and tune detections to cut down false positives.
- Support the SOC team with alert triage, investigation, and incident response.
- Help with SIEM testing, rule tuning, documentation, and ongoing improvements.
Requirements:
- Hands-on exposure to at least one SIEM platform, whether through a job, internship, home lab, or project.
- Basic understanding of security logs, events, and monitoring.
- Familiarity with a SIEM query language such as SPL (Splunk), AQL (QRadar), or similar.
- Understanding of how alerts, correlation rules, and dashboards work.
- Basic knowledge of SOC operations and the incident response lifecycle.