Security Architect

Responsibilities

• Lead the design, deployment and configuration of SIEM solutions, ensuring seamless integration with various security tools, systems and log sources
• Plan and execute SIEM migration projects, including data transfer, log source integration, rule/alert migration and configuration tuning
• Develop, customise and fine-tune SIEM use cases, correlation rules, dashboards and reports to effectively detect threats and suspicious activities
• Integrate diverse log sources such as firewalls, IDS/IPS, antivirus, cloud services, applications and operating systems into the SIEM for comprehensive monitoring
• Collaborate with the SOC (Security Operations Center) team to support further use case creation and finetuning following SOC team requirements
• Regularly review and optimize SIEM performance to ensure efficient log collection, storage, processing and alerting
• Maintain comprehensive documentation for SIEM configurations, integrations client and migration processes, providing regular reports on SIEM performance
• Train and mentor junior security engineers and SOC analysts on SIEM use, best practices and troubleshooting
• Work closely with IT, security and network teams to ensure the SIEM platform aligns with security strategies and goals

Languages