SIEM Administrator
Role Overview
SIEM Administrator administering, maintaining, and optimizing the organization's Security Information and Event Management (SIEM) platform to ensure effective security monitoring, log management, and threat detection.
The role focuses on onboarding log sources, developing and tuning correlation rules, supporting security monitoring, and enhancing the overall effectiveness of the Security Operations Center (SOC).
Key Skills for This Role
Full Job Posting
Overview
SIEM Administrator administering, maintaining, and optimizing the organization's Security Information and Event Management (SIEM) platform to ensure effective security monitoring, log management, and threat detection.
The role focuses on onboarding log sources, developing and tuning correlation rules, supporting security monitoring, and enhancing the overall effectiveness of the Security Operations Center (SOC).
Key Responsibilities
- Administer, configure, and maintain the SIEM platform to ensure high availability and optimal performance.
- Integrate and onboard log sources from servers, endpoints, network devices, cloud services, and security solutions.
- Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts to improve threat detection capabilities.
- Monitor SIEM platform health, troubleshoot performance issues, and ensure continuous log collection and data integrity.
- Perform log parsing, normalization, and validation to ensure accurate event correlation and reporting.
- Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection accuracy.
- Support SOC analysts by investigating SIEM-related issues and enhancing visibility into security events.
- Generate security reports, dashboards, and metrics to support operational and management reporting.
- Collaborate with security, infrastructure, and application teams to integrate new systems and improve monitoring coverage.
- Support SIEM platform upgrades, maintenance activities, and implementation of new security use cases.
- Maintain SIEM documentation, including log source inventory, correlation rules, and operational procedures.
- Contribute to the continuous improvement of SIEM architecture, detection capabilities, and SOC monitoring processes.
Talent Profile
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field.
- Proven experience of 3+ years in cybersecurity, including hands-on experience administering SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm, or similar enterprise SIEM solutions.
Job Nature
SITE, Project-Based.
Benefits
- In addition to the monthly salary, SITE provides a social allowance.
- Mobile allowance.
- Medical insurance for the employee, his/her family, and parents.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at SITE سايت
Digital Forensics & Incident Response (DFIR) Analyst
, KSA
SITE is seeking a DFIR Analyst to investigate cyber incidents, preserve digital evidence, and support enterprise incident response. Candidates need a relevant bachelor’s degree and at least two years of hands-on DFIR exp
Senior Director - Cloud Customer Engagement
, KSA
SITE is seeking a Senior Director to own customer engagement strategy, annual targets, and growth across public and private sector cloud portfolios. The role focuses on new-logo acquisition, pipeline acceleration, value