XSIAM SIEM Engineer | Log Ingestion & Detection

Entelligence; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Medical, dental, vision and life 보험

Vacation, sick time and paid holidays

Matching 401(k) program

Job summary

Entelligence is seeking an Engineer to support our Professional Services clients in a cross-functional environment. As an XSIAM Engineer, you will assist with log migration, ingestion, and detection strategy to protect customers from threats.

You will work closely with the technical lead to onboard relevant log sources and ensure ingestion into XSIAM in line with industry best practices. You will design and implement correlation rules, develop the detection strategy, and produce technical

Qualifications

• 3+ years deploying and integrating SIEM at enterprise scale.
• Experience coordinating event collection, log management and identity monitoring.
• Ability to create and develop correlation and detection rules for alerting.
• Familiarity with SIEM reporting and performance metrics.
• Bachelor’s degree or industry qualifications (CISSP, GIAC, etc) preferred.

Responsibilities

• Work with technical lead to develop log ingestion strategy
• Contribute to detection strategy based on industry best practices
• Detail step by step process to ingest high quality log sources
• Perform log source monitoring and optimization
• Create high quality correlation rules
• Tune log sources and correlation rules
• Be an SME for SIEM, Correlation and Log Source Ingestion
• Recognize opportunities where automation can improve analyst alert handling
• Collaborate with internal and external teams to ensure product adoption
• Create technical documentation detailing SIEM aspects of the engagement
• Travel to customer meetings and workshops as needed (10%)

Skills

SIEM deployment

Log ingestion

Detection rules

Threat detection

Cross-functional collaboration

Education

Bachelor’s degree or equivalent

Tools

Splunk

IBM QRadar

Job description

Entelligence is seeking an Engineer to support our Professional Services clients in a cross-functional environment. As an XSIAM Engineer, you will assist with log migration, ingestion, and detection strategy to protect customers from threats.

You will work closely with the technical lead to onboard relevant log sources and ensure ingestion into XSIAM in line with industry best practices. You will design and implement correlation rules, develop the detection strategy, and produce technical