SOC SIEM Administrator

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
SIEM Administrator will be responsible for maintaining client’s SIEM appliance by making sure all SIEM deployment devices are working properly efficiently and with desired performance. SIEM Administrator main duties and responsibilities: managing user access verifying availability monitoring database loads managing application performance capacity and availability monitoring disk space verifying log continuity and log management reports application problem determination/problem source investigation monitoring SIEM system patches and upgrades installing application patches as needed verifying data collection verifying backups are running and complete

Your tasks:
Install configure and maintain SIEM components.
◦ Ensure proper integration with various data sources and security tools.
◦ Monitor system performance and manage SIEM technology health including patches and updates.
◦ Troubleshoot and resolve SIEM tool issues ensuring minimal downtime.
◦ Develop and fine-tune correlation rules offenses and alerts to detect security incidents.
◦ Collaborate with the security team to analyze and respond to security events and incidents.

Required Technical and Professional Expertise

• * 2 + years of experience in IT security role.
• * 1+ year of experience with supported SIEM technology (preferably Qradar or Splunk Sentinel PaloAlto ArcSight)
• * Linux Administration.

Preferred Technical and Professional Expertise