Overview:
TekWissen is a global workforce management provider throughout India and many other countries in the world. The below job opportunity is one of our clients which has been a one-stop solution for professional digital services.
Position: SIEM Administrator (L2 Profile)
Location: Dubai
Job Type: Full Time
Work Type: Onsite
Job Description:
Roles and Responsibilities:
- Administer configure and manage Elastic Search SIEM (Elastic Stack: Elasticsearch Logstash Kibana Beats) environments.
- Develop and optimize SIEM rules alerts and dashboards to detect security threats.
- Conduct troubleshooting and root cause analysis for SIEM-related issues (indexing cluster health ingestion failures and performance).
- Implement upgrades patches and system tuning to ensure high availability and performance.
- Manage user roles access controls and security configurations.
- Collaborate with SOC security analysts and incident responders to improve detection capabilities.
- Integrate data sources (cloud on-prem endpoints firewalls applications) into Elastic SIEM.
- Prepare and maintain system documentation runbooks and troubleshooting guides.
- Support compliance and audit requirements by ensuring log retention and security policies are followed.
Required skillset:
- 4 years of experience in Elastic Search administration and SIEM operations.
- Strong expertise in Elastic Stack components: Elasticsearch Kibana Logstash Beats Elastic Agent.
- Hands-on experience with SIEM use cases alerting and dashboard creation.
- Proficiency in troubleshooting cluster performance ingestion pipelines and data indexing.
- Good understanding of Linux system administration and networking fundamentals.
- Familiarity with scripting languages (Python Bash or PowerShell) for automation.
- Knowledge of security monitoring threat detection and incident response workflows.
- Experience integrating diverse log sources into Elastic SIEM.
- Strong problem-solving and analytical skills.
- Strong communication skills and the ability to work effectively with internal teams and external vendors
- Willing to work on client location - onsite
Educational Qualifications:
- Bachelors degree in Computer Science / Engineering or equivalent advanced industry certifications
- Additionally Product certification in the above solutions
- Certification Eligibility: Certification is mandatory in the tools & technology category
TekWissen Group is an equal opportunity employer supporting workforce diversity.
Overview: TekWissen is a global workforce management provider throughout India and many other countries in the world. The below job opportunity is one of our clients which has been a one-stop solution for professional digital services. Position: SIEM Administrator (L2 Profile) Location: Du...
Overview:
TekWissen is a global workforce management provider throughout India and many other countries in the world. The below job opportunity is one of our clients which has been a one-stop solution for professional digital services.
Position: SIEM Administrator (L2 Profile)
Location: Dubai
Job Type: Full Time
Work Type: Onsite
Job Description:
Roles and Responsibilities:
- Administer configure and manage Elastic Search SIEM (Elastic Stack: Elasticsearch Logstash Kibana Beats) environments.
- Develop and optimize SIEM rules alerts and dashboards to detect security threats.
- Conduct troubleshooting and root cause analysis for SIEM-related issues (indexing cluster health ingestion failures and performance).
- Implement upgrades patches and system tuning to ensure high availability and performance.
- Manage user roles access controls and security configurations.
- Collaborate with SOC security analysts and incident responders to improve detection capabilities.
- Integrate data sources (cloud on-prem endpoints firewalls applications) into Elastic SIEM.
- Prepare and maintain system documentation runbooks and troubleshooting guides.
- Support compliance and audit requirements by ensuring log retention and security policies are followed.
Required skillset:
- 4 years of experience in Elastic Search administration and SIEM operations.
- Strong expertise in Elastic Stack components: Elasticsearch Kibana Logstash Beats Elastic Agent.
- Hands-on experience with SIEM use cases alerting and dashboard creation.
- Proficiency in troubleshooting cluster performance ingestion pipelines and data indexing.
- Good understanding of Linux system administration and networking fundamentals.
- Familiarity with scripting languages (Python Bash or PowerShell) for automation.
- Knowledge of security monitoring threat detection and incident response workflows.
- Experience integrating diverse log sources into Elastic SIEM.
- Strong problem-solving and analytical skills.
- Strong communication skills and the ability to work effectively with internal teams and external vendors
- Willing to work on client location - onsite
Educational Qualifications:
- Bachelors degree in Computer Science / Engineering or equivalent advanced industry certifications
- Additionally Product certification in the above solutions
- Certification Eligibility: Certification is mandatory in the tools & technology category
TekWissen Group is an equal opportunity employer supporting workforce diversity.
View more
View less