Senior SIEM Engineer — Multi-Tenant Security & SOAR

Andersen; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Private health insurance

Annual bonus

Referral program

Career development portal access

Job summary

Andersen is seeking a SIEM Administrator/Engineer to enhance a SIEM platform and support centralized security monitoring for a multi-tenant, international environment. You will administer, tune and extend SIEM capabilities while collaborating with SOC in a fast-paced team.

The role covers onboarding diverse log sources, developing detection content and dashboards, and building SOAR playbooks. A background in IT security and strong English are required.

Qualifications

• 5+ years IT or cybersecurity experience.
• 3+ years administering an enterprise SIEM in production.
• Hands-on with log sources onboarding, parsing, normalization (Syslog, CEF, WEF, APIs).
• Experience writing detection content in KQL, SPL, AQL or equivalent.

Responsibilities

• Administering, maintaining and upgrading the SIEM platform.
• Onboarding/multi-tenant log sources for network, endpoint, cloud, identity and apps.
• Developing, tuning and maintaining detection rules, dashboards and reports.
• Reducing false positives with SOC and implementing new use cases.
• Building and maintaining SOAR playbooks and integrations.
• Maintaining documentation, data retention policies and access control.
• Supporting audits and compliance reporting.

Skills

SIEM

Log onboarding

Detection content

SOAR

Dashboards

Documentation

Audits/compliance

Tools

Microsoft Sentinel

Splunk ES

IBM QRadar

Elastic Security

Job description

Andersen is seeking a SIEM Administrator/Engineer to enhance a SIEM platform and support centralized security monitoring for a multi-tenant, international environment. You will administer, tune and extend SIEM capabilities while collaborating with SOC in a fast-paced team.

The role covers onboarding diverse log sources, developing detection content and dashboards, and building SOAR playbooks. A background in IT security and strong English are required.