SIEM Analyst — Threat Detection & Forensics

Fosh; Argentina; Presencial; ARS 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

Fosh is seeking an experienced SIEM Engineer to collect, normalize, and analyze security logs across the organization. You will implement log pipelines, ensure ingestion into SIEM platforms, and develop dashboards for threat detection and operational metrics.

You will design correlation rules, tune alerts, and support incident response and forensic investigations. Collaboration with SOC, IAM, and threat-hunting teams is essential, with strong documentation and knowledge sharing emphasized.

Formación

• Studies in computer science, telecommunications, cybersecurity, or related fields.
• At least 3 years in SIEM operations, log analysis, or security monitoring.
• Hands-on experience collecting and managing logs from multiple sources (endpoints, network devices, servers, cloud, apps).
• At least 2 years with Splunk and CrowdStrike required.

Responsabilidades

• Design, implement, and maintain log collection pipelines from multiple sources.
• Ensure logs are ingested, parsed, normalized across SIEM platforms.
• Maintain data quality and consistency across log sources.
• Design, build, and maintain dashboards to visualize security posture and metrics.
• Create, tune, and maintain alerts and correlation rules.
• Support incident response and forensic investigations through log analysis.
• Collaborate with SOC analysts, IAM, threat hunting, and other security roles.
• Document procedures for log management, detection, and investigation.

Conocimientos

SIEM operations

Log analysis

Security monitoring

Educación

Computer science / cybersecurity related study

Herramientas

Splunk

CrowdStrike

FortiAnalyzer

New Relic

ManageEngine AD Audit

Axonius

Descripción del empleo

Fosh is seeking an experienced SIEM Engineer to collect, normalize, and analyze security logs across the organization. You will implement log pipelines, ensure ingestion into SIEM platforms, and develop dashboards for threat detection and operational metrics.

You will design correlation rules, tune alerts, and support incident response and forensic investigations. Collaboration with SOC, IAM, and threat-hunting teams is essential, with strong documentation and knowledge sharing emphasized.