SIEM Security Engineer (Splunk & QRadar)

TekServs Cons Ltd Co; Frisco (TX); On-site; USD 106,000 - 143,000; Full time

Job summary

TekServs Cons Ltd Co in the United States seeks a Cyber Security Engineer for a full-time, 40-hour work week to develop and optimize Splunk use cases and dashboards for real-time monitoring.

You will lead customization of SIEM tools (Splunk ES, QRadar) to reduce false positives, design advanced queries, and monitor alerts, escalating incidents as needed. Travel to client sites across the USA is required.

Qualifications

• Bachelor's degree in CS/IT/IS/Engineering or closely related field with 12 months of related experience.
• Experience as Cyber Security Engineer or Security Analyst is required.
• Willingness to travel/relocate within USA as needed.

Responsibilities

• Develop and optimize Splunk use cases and dashboards for real-time security monitoring.
• Lead customization and tuning of SIEM tools (Splunk ES, QRadar) to reduce false positives.
• Design advanced queries and use cases for insider threat, APT and cloud security monitoring.
• Monitor alerts from SIEM tools, escalate high-priority incidents, and respond promptly.
• Perform root cause analysis (RCA) for security incidents and provide actionable reports.
• Travel and/or relocation to client sites across the USA as required.

Education

Bachelor's degree in Computer Science/ IT/IS/Engineering (Any)

Tools

Splunk

QRadar

SIEM

Job description

TekServs Cons Ltd Co in the United States seeks a Cyber Security Engineer for a full-time, 40-hour work week to develop and optimize Splunk use cases and dashboards for real-time monitoring.

You will lead customization of SIEM tools (Splunk ES, QRadar) to reduce false positives, design advanced queries, and monitor alerts, escalating incidents as needed. Travel to client sites across the USA is required.