Job description
Hiring for ELK-SIEM Engineer _ Elasticsearch
We are looking for experienced IAM to join our team.
We look forward to connecting with talented professionals in the IAM domain.
Job Description:
ELK-SIEM Engineer _ Elasticsearch SIEM
Required Technical Skills
- Strong hands-on experience with Elastic SIEM / Elastic Security.
- Experience with Elastic Defend, Kibana, Elasticsearch, Logstash, Beats, Fleet, and detection engineering.
- Hands-on experience in SOAR implementation and automation orchestration.
- Experience implementing or managing other SIEM platforms such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, Stellar Cyber, or equivalent.
- Strong understanding of Windows, Linux, Active Directory, Azure, AWS, networking, and cloud security.
- Knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat intelligence.
- Experience with scripting (Python, PowerShell, Bash) for automation.
- Understanding of EDR/XDR, NDR, Email Security, IAM, and Security Controls integration.
Preferred Certifications
- Elastic Certified Engineer, Microsoft SC-200, AZ-500, Splunk, QRadar, GCIH, GCIA, CEH, CISSP, or equivalent certifications.
Soft Skills
- Strong analytical and troubleshooting skills, stakeholder communication, client-facing experience, documentation skills, mentoring capability, and ability to lead critical security incidents.
Deal Breaker Skill
Elastic Search
Mandatory Skills
- Elastic Search
- Elastic SIEM
- ELK
- Soar Automation
- Elastic Security