الوصف الوظيفي
Job Description: SIEM Lead – McAfee
The Security Information and Event Management (SIEM) Integration Engineer will possess deep technical knowledge on a number of security technologies; the main area of focus will be the District implementation of the McAfee SIEM and associated appliances (to include Enterprise Security Manager (ESM), Enterprise Log Manager (ELM), Advanced Correlation Engine (ACE)).
Act as the lead for Operations and Maintenance and Configuration Management for all Security Operations Center (SOC) and Security Information and Event Management (SIEM) tools.
Analysis, design, configuration, implementation, documentation and operation of MacAfee SIEM and associated appliances (to include Enterprise Security Manager (ESM), Enterprise Log Manager (ELM), Advanced Correlation Engine (ACE)).
Responsible for SIEM security design review and recommendations, technical data gathering, security and policy review and configuration, security device implementation planning, configuration and implementation of security products and technical quality assurance.
Lead technical troubleshooting efforts for complex network environments to identify and eliminate network or security configuration issues for SIEM data collection.
Manage system deployments, upgrades, ongoing maintenance and operations.
Configuration and operation of security device authentication, management & logging platforms.
Provide Tier3 support to SOC Analyst personnel utilizing the SIEM to respond to security incidents and events.
Identify, troubleshoot, and resolve complex network connectivity issues as well as advise on network security related issues.
Understanding of network and endpoint security tools and how they integrate into the SIEM and provide a cohesive view of network incidents and security.
Configure backups, verify custom reports, manage log source groups and validate log sources.
Required Qualification and skills
Coordinates IT project management, engineering, maintenance, QA, and risk management.
Performs application upgrades.
Performs, monitoring, maintenance, or reporting on real- time databases, real-time network and serial data communications, and real-time graphics and logic applications.
Troubleshoots problems.
Experience as a SOC Analyst Level 3 or SOC Team Lead
Experience scripting in regular expression for SIEM signatures
المهارات
McAfee SIEM, ESM, ELM
تفاصيل الوظيفة
منطقة الوظيفة South Jeddah, جدة , المملكة العربية السعودية
قطاع الشركة أمن المعلومات و الشبكات
طبيعة عمل الشركة صاحب عمل (القطاع الخاص)
الدور الوظيفي تكنولوجيا المعلومات
نوع التوظيف دوام كامل
الراتب الشهري $4,000 - $5,000
عدد الوظائف الشاغرة غير محدد
المرشح المفضل
المستوى المهني متوسط الخبرة
عدد سنوات الخبرة الحد الأدنى: 6 الحد الأقصى: 11
منطقة الإقامة المملكة العربية السعودية
العمر الحد الأدنى: 26 الحد الأقصى: 35
https://www.bayt.com/ar/saudi-arabia/jobs/siem-lead-4407487/