XSOAR Consultant

VirtualVocations; City of Rochester (NY); Remote; USD 100,000 - 130,000; Full time

Job summary

A remote consultancy firm is seeking a Remote XSOAR Consultant to enhance threat detection by developing strategies for log ingestion and creating correlation rules. Ideal candidates will have over 6 years of experience in deploying SIEM solutions, with expertise in tools like Splunk and IBM QRadar. This role offers the opportunity to work collaboratively in a cutting-edge environment.

Qualifications

• 6+ years of experience in deploying and integrating SIEM solutions in enterprise environments.
• Experience with Security Operation Centers tooling and processes.
• Ability to create and develop correlation and detection rules within a SIEM.

Responsibilities

• Collaborate with the technical lead to develop a log ingestion strategy.
• Document a detailed step-by-step process for ingesting high-quality log sources.
• Create high-quality correlation rules to enhance threat detection.

Skills

Deploying SIEM solutions

Creating correlation rules

Experience with Splunk

Experience with IBM QRadar

Job description

Overview

A company is looking for a Remote XSOAR Consultant (Automation).

Key Responsibilities

• Collaborate with the technical lead to develop a log ingestion strategy
• Document a detailed step-by-step process for ingesting high-quality log sources
• Create high-quality correlation rules to enhance threat detection

Required Qualifications

• 6+ years of experience in deploying and integrating SIEM solutions in enterprise environments
• Experience with Security Operation Centers tooling and processes
• Ability to create and develop correlation and detection rules within a SIEM
• Experience with various SIEM technologies such as Splunk and IBM QRadar