optimization of SIEM and SOAR platforms. You will enhance our customers' security posture by developing advanced correlation rules, automating incident response playbooks, and managing complex log integrations. This role bridges the gap between technical architecture and proactive threat detection to ensure a resilient digital defense.
The Senior Cyber Defense Engineer is responsible for the deployment, administration, optimization, and continuous improvement of SIEM and SOAR platforms. The role ensures proper log ingestion, correlation rule development, incident detection, and automated response orchestration to enhance the customers cybersecurity posture.
Key Skills and qualifications required
BS.C degree in communications or computer science
2+ years of experience in the same field in a system integrator or a service provider
He must at least be good in reading, writing, and speaking English
Excellent written and verbal communication skills required.
Solid understanding of Information Security and Networking required.
Solid understanding of Linux/Unix administration
Hands on Experience in SIEM implementation and administration on of (Splunk, FortiSIEM, Elastic SIEM)
Strong understanding of Firewalls, IDS/IPS, EDR/XDR, Network Security Monitoring, Email Security, Identity and Access Management, Cloud Security Logs
Hands on Experience in SOAR technologies implementation and administration
Automation & Scripting Knowledge e.g., Python, REST APIs
Splunk Certified Admin, FortiSIEM Admin, SANS, CEH and or other industry security certifications preferred.
Accountabilities
Conduct demos/proof of concept setups to convince the customer with the product to make the customer issue the PO
Deploy, configure, and maintain SIEM platforms (e.g., Splunk, IBM QRadar, FortiSIEM, Elastic SIEM).
Manage log collection, parsing, normalization, and enrichment from multiple sources
Develop and optimize correlation rules and detection use cases.
Implement MITRE ATT&CK aligned detection rules.
Deploy and maintain SOAR platforms (e.g., Cortex XSOAR, FortiSOAR).
Develop automation playbooks and workflows for incident response.
Integrate SOAR with security tools
Responsible for providing support service (after sales service) for customers who has active contracts
Gain educational levels to enable troubleshooting skills in order to handle advanced scenarios.
Develop low level design & as built manual to document installation activities & provide it to customer.
Report Lab /POC/installation activities visit internally/externally.( Quality Assurance)
Conduct technical/hands on training to customers
Sustain migration from legacy to new system without business interruption.
Fill out the form and upload your CV to submit your application.