Link Management Solutions Pvt. Ltd.

logo

Create an Account

logo

facebook facebook

I am Looking For

Job Search

Latest News

Crisis Management: you can prepare for natural disasters, not stupidity

In the last month a large number of enterprises were flooded by unseasonal and incessant rain; the situation was such that people shelved differences and collectively in unison worked to save human lives. Stories of valor and selflessness published and circulated on social media gladdened the heart

17.12.2015 Read More

Already a member login here

Job Search

SIEM Engineer, 2 To 10 Years

Job responsibility

Study current status of Logging for a customer and bring them to expected state to ensure they are using latest version of Client SIEM, parsing of logs etc. in a predefined period.

2- Develop, Support and Enhance event parsing, log collection and storage, compliance automation and identity monitoring activities.

3- Develop & Enhance processes and procedures around security event management.

4- Configure queries, correlation rules, dashboards, alerts, searches, reports, etc., based on operating systems, platform, data type, and other reporting elements.

5- Troubleshoot log collection from networking devices, operating systems, databases, security applications, and more.

6- Gather and understand technical requirements related to functionality, design, and integration.

7- Install and configure the SIEM including all its components, local & or remote log collectors.

8- Plan & execute SIEM migration activities.

9- Identify, design & implement use cases to address PCI compliance along with specific enterprise security requirement.

Requirement: Expertise with use of regular expressions.

2- Knowledge of building and managing SIEM rules, reports and offenses.

3- TCP/IP, LINUX operating system and features such as vi, iptables, ssh, cat, tail, grep etc

4- Knowledge about security technologies such as firewalls, encryption using keys, SSL, HTTPS, SSH, intrusion detection, routing switch ACLs, VLAN, Span Ports, Network IDS / IPS platforms.

5- Knowledge of building and managing SIEM rules, reports.

6- Experience with enterprise SIEM architecture and components.

7- Experience with either Alien Vault, AccelOps, Qradar, Splunk, Nitro, LogRythm, ArcSight, OSSIM or others will have added advantage.

8- You need to be dedicated, smart & hunger for learning/experimenting with new technologies/tools etc.

9- Good interpersonal, verbal and written communication skills.

10- Result oriented with good analytical skills.

11-Ability to exercise prudent judgment and offer knowledgeable advice.

12-Ability to work both independently and in a team environment.

13-Knowledge on Security standards like PCI-DSS, ISO 27001, etc.

14-Have a solid working knowledge of networking technology and tools, firewalls, proxies, and the OSI Model, including TCP/IP protocols and standards.

15-Preferred Certification: CEH, RHCSS, GIAC, GCIH, GCIA, GREM, SANS.