SIEM Engineer

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
Why you’ll love your job:
You will join IBM Security Services which is a division of IBM Consulting responsible for delivering security services to its large global customers alongside major digital transformation projects in the application and cloud domains. You will join a team of 20 + Security Analysts who are looking after to monitor detect and respond to cyber threats. Learn more about the SOC Security Operations Centre here .

You will be:

• Configuring and managing Microsoft Sentinel
• Monitoring Microsoft Sentinel availability and performance
• Handling log source and new technologies on-boarding into Microsoft Sentinel
• Creating/testing new alerting rules in Sentinel
• Tuning alerting rules
• Assuring quality of alerting rules
• Creating and maintaining documentation of alerting rules and use cases
• Contributing to the creation of playbooks

Required Technical and Professional Expertise
We look for motivated professionals who are keen to learn and grow and:

• Hands-on experience with managing Microsoft Sentinel
• Deep experience using KQL
• Experience with enterprise SOC structure SOC-as-a-service
• Knowledge of Networking and Network Security
• Knowledge of current IT security best practices
• Knowledge of system administration networking and operating system hardening techniques

Preferred Technical and Professional Expertise
Experience with the following are bonus points but not necessary you can learn them at IBM:

• Strong documentation skills
• Effective communication skills
• Committed to continuous education around latest Sentinel features best practices and industry trends.
• Ms Sentinel certifications as AZ.500 are a plus.