SIEM Admin - Qradar/ Arcsight

Abu Dhabi, United Arab Emirates | Posted on 01/26/2024Job Description: CyberGate Defense, a leading cybersecurity company, is seeking a SIEM Admin Engineer with 4-6 years of experience to join our team. The successful candidate will be responsible for the administration of SIEM Tools and developing custom parsers.Responsibilities:Deep knowledge of QRadar/Arcsight; other SIEM technology expertise is also helpful.Security operations experience such as incident management, intrusion detection, firewall deployment, and security event analysis.Experience with security devices and general IT installations, configuration, and troubleshooting (e.g., Firewall, IDS, etc.).Development of custom parsers, Use Cases, and fine-tuning the Use Case based on inputs from the SOC team.Handle day-to-day activities required to achieve and maintain SIEM operational readiness.Perform upgrades on the QRadar/Arcsight SIEM components.Deploy new Console, Event Processor, Data Node & Collector as required to collect data feeds.Investigate and debug alerts generated in the console.Review configurations for potential security weaknesses.Develop content including rules, reports, and dashboards.Perform QA (Quality Assurance) function on content developed by other parties.Conduct health checks that need to be performed on the SIEM.Excellent communication and customer interaction skills are required.

#J-18808-Ljbffr IT & Technology