Job Title: SIEM Engineer Work Location: Qatar Driving License: candidate with Qatar driving license will have an added advantage Education: Bachelors or higher Engineering degree Experience: Minimum 8 years of experience working in IT or OT Platform, End user environment preferably MSSP (SOC) or Control System / Cyber Security Domain. Skillset: Design and implementation experience in any one of the SIEM solution (LogRhythm / Splunk (Preferred) / FortiSIEM / IBM QRadar) in OT (Operational Technology) environment SIEM Parser creation, Use-Case Design, Creation and Tuning SIEM Correlation, Analytics and UEBA Run-Books Design, Creation and Tuning Configuring and onboarding all log sources Job Description: Implementation of SIEM solutions including design, testing, deployment, and documentation Onboarding of data sources along with necessary use cases, dashboards, reports, and alerts Candidates with experience/certifications in Splunk (Preferred)/Logrhythm/Fortisiem or IBM... Qradar based SIEM solutions Hands on implementation knowledge in any one of the SIEM solution (LogRhythm/Splunk/ Fortisiem / IBM Qradar) SIEM Parser creation, Use-Case Design, Creation and Tuning and enhancing the Security Orchestration and Operations (SOAR) functionality SIEM Correlation, Analytics, UEBA, IRP Run-Books Design, Creation and Tuning Understand user access controls, different SOC user roles, applying roles-based access control Good experience in all log source onboarding methods for example Syslog, agent base, agent less, pull or push methods, API etc. Should have better understanding of SIEM vendor best practices and recommendations Should have SME level of understanding on SIEM components Good understand of network requirements and constraints for inter component as well as for log source communications Experience in data parsing, Parser development, normalizing, and segregation Should have experience in SIEM standalone component deployment, single site, and multi-site cluster deployment Have experience in documenting the design, implementation, transition, and use case specification documentations Have experience in creating knowledge objects, correlations searches, dashboards, and reports. Understanding of resource requirement for SIEM components according to log volume and use case requirement