FortiSIEM & FortiSOAR Specialist (m/f/d)

Overview

FortiSIEM & FortiSOAR Specialist

Responsibilities

• Design, deploy, and maintain FortiSIEM infrastructure including collectors, workers, and supervisors.
• Develop and tune correlation rules, reports, and dashboards to detect security threats and anomalies.
• Implement and manage FortiSOAR playbooks to automate incident response workflows and reduce mean time to respond.
• Integrate FortiSIEM and FortiSOAR with existing security tools such as firewalls, endpoint protection, vulnerability scanners, and threat intelligence feeds.
• Perform log source onboarding, parsing, and normalisation to ensure comprehensive visibility across the environment.
• Conduct regular health checks, performance tuning, and capacity planning for both platforms.
• Collaborate with SOC analysts to refine detection logic and improve response procedures.
• Troubleshoot platform issues and coordinate with Fortinet support when necessary.
• Document configurations, processes, and runbooks for operational continuity.

Qualifications & Skills

• 3+ years of hands‑on experience with FortiSIEM administration and deployment.
• Demonstrable experience with FortiSOAR playbook development and integration.
• Strong understanding of SIEM concepts including log management, event correlation, and incident investigation.
• Familiarity with common log sources such as Windows/Linux systems, network devices, cloud platforms, and security tools.
• Experience integrating SIEM/SOAR with third‑party solutions via APIs and connectors.
• Knowledge of security frameworks and standards relevant to the region (SAMA CSF, NCA ECC, ISO 27001 would be advantageous).
• Fortinet NSE certifications, particularly NSE 5 or above in FortiSIEM/FortiSOAR, are highly preferred.
• Strong analytical and problem‑solving skills with attention to detail.

Halian Group