Siem Administrator/L2 Jobs

Responsibilities

• Coordinate to SOC Team related security incidents if necessary
• Review security incidents to assess their urgency
• Provide reporting (weekly, monthly)
• Handling escalate information security breach from SOC Team
• Manage and configure security tools
• Tuning SIEM, Tuning Rules, Create Dashboard, Tuning Use Case, Log integration (related to SIEM admin work)

Requirements

• Experience using SIEM (Splunk, ELK (ElasticSearch, Qradar) (at least one of them)
• Having knowledge related tools security technology (ex: Firewall, IPS/IDS, VPN, Anti-spam, Anti-malware, antivirus etc) (at least one of them)
• Experience as Security SIEM Administrator (at least 1 year)
• Having CEH, CSA, E-CIH certificate would be advantages (at least one of them)
• Good attitude and fast learner
• Experience as SOC Analyst L1 (at least 1 year)