Senior SIEM Engineer (SIEM Management)

About the role

We are looking for a Senior SIEM Engineer to design, implement and manage our SIEM infrastructure. The role focuses on enhancing security monitoring, threat detection and incident response across on‑premise and cloud environments.

Key responsibilities

• Design, deploy, test, maintain and troubleshoot SIEM solutions (Splunk, Microsoft Sentinel or similar).
• Manage project dependencies such as connectivity, storage, licensing and hardware.
• Apply patches, updates and upgrades; conduct regular SIEM health checks and produce performance reports.
• Administer SIEM appliances or virtual appliances, including OS, backups, user accounts and log source groups.
• Develop integrations, connectors and parsers for new event sources and implement security monitoring rules.
• Create compliance and audit reports, watch‑lists and automation scripts to improve SIEM efficiency.
• Document high‑level and low‑level designs, as‑built configurations and custom integrations.
• Mentor junior SIEM engineers and support SOC work processes.

Required profile

• Minimum 5 years of security engineering experience, with at least 3 years managing SIEM solutions.
• Strong knowledge of SIEM platforms (Splunk, Microsoft Sentinel) and security tool integrations.
• Experience with cloud log sources (AWS, Azure, GCP, OCI) and SOC operations.

Required skills

• Splunk, Microsoft Sentinel or comparable SIEM platforms.
• Integration of AV, AAA, firewalls, DLP, IDS/IPS.
• Cloud log collection: AWS CloudTrail, GuardDuty, VPC Flow Logs; Azure Activity Logs, Azure AD/Entra ID sign‑in logs, Microsoft Defender for Cloud; GCP Cloud Audit Logs, VPC Flow Logs; OCI Audit Logs, OCI Cloud Guard.
• SIEM health checks, patching, upgrades, backup configuration.
• Log source management, parser and connector development.
• Security monitoring rule creation, compliance reporting, watch‑list management.