SIEM Administrator

SITE سايت; Riyadh; Presencial; SAR 167.000 - 312.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance for employee and his

Medical insurance for family

Medical insurance for parents

Descripción de la vacante

SITE سايت is seeking an experienced SIEM Administrator to oversee the organization’s SIEM platform, ensuring high availability, log integrity, and effective threat detection across on-prem and cloud sources.

You will onboard log sources, develop and tune correlation rules, dashboards, and alerts, support SOC analysts, and produce dashboards and reports. Collaborate with security and IT teams to improve monitoring coverage and incident response.

Formación

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field.
• Proven 3+ years in cybersecurity, with hands-on SIEM administration experience on enterprise platforms.

Responsabilidades

• Administer, configure, and maintain the SIEM platform for high availability and optimal performance.
• Integrate and onboard log sources from servers, endpoints, networks, cloud services, and security solutions.
• Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts.
• Monitor SIEM health, troubleshoot performance, and ensure continuous log collection and data integrity.
• Perform log parsing, normalization, and validation for accurate event correlation and reporting.
• Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection.
• Support SOC analysts by investigating SIEM-related issues and enhancing visibility.
• Generate security reports, dashboards, and metrics for operational and management reporting.
• Collaborate with security, infra, and app teams to integrate new systems and improve monitoring.
• Support SIEM upgrades, maintenance, and new use case implementations.
• Maintain SIEM documentation including log source inventory, rules, and procedures.
• Contribute to continuous SIEM architecture and SOC monitoring improvements.

Conocimientos

SIEM administration

Threat detection

Log management

Correlation rules

Dashboards & alerts

Log parsing

SOC support

Educación

Bachelor's degree in Cybersecurity, IT, CS, Digital Forensics or related field

Herramientas

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

LogRhythm

Descripción del empleo

SIEM Administrator administering, maintaining, and optimizing the organization's Security Information and Event Management (SIEM) platform to ensure effective security monitoring, log management, and threat detection. The role focuses on onboarding log sources, developing and tuning correlation rules, supporting security monitoring, and enhancing the overall effectiveness of the Security Operations Center (SOC).

Key Responsibilities:

• Administer, configure, and maintain the SIEM platform to ensure high availability and optimal performance.
• Integrate and onboard log sources from servers, endpoints, network devices, cloud services, and security solutions.
• Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts to improve threat detection capabilities.
• Monitor SIEM platform health, troubleshoot performance issues, and ensure continuous log collection and data integrity.
• Perform log parsing, normalization, and validation to ensure accurate event correlation and reporting.
• Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection accuracy.
• Support SOC analysts by investigating SIEM-related issues and enhancing visibility into security events.
• Generate security reports, dashboards, and metrics to support operational and management reporting.
• Collaborate with security, infrastructure, and application teams to integrate new systems and improve monitoring coverage.
• Support SIEM platform upgrades, maintenance activities, and implementation of new security use cases.
• Maintain SIEM documentation, including log source inventory, correlation rules, and operational procedures.
• Contribute to the continuous improvement of SIEM architecture, detection capabilities, and SOC monitoring processes.

Talent Profile:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field.
• Proven experience of 3+ years in cybersecurity, including hands-on experience administering SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, LogRhythm, or similar enterprise SIEM solutions

Job Nature:

SITE, Project-Based.

In addition to the monthly salary, SITE provides you these Benefits:

• Medical Insurance employee, his/her family, and parents.