Cybersecurity Engineer (SIEM/SOAR)

We are looking for a Cybersecurity Engineer with experience in SIEM, SOAR, and Security Operations to help strengthen enterprise security monitoring, threat detection, and incident response. This role is ideal for professionals who are passionate about cybersecurity, automation, and improving security operations through modern technologies.

Key Responsibilities

• Design, implement, and maintain SIEM solutions to support enterprise security monitoring.
• Develop and optimize detection rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate and manage security logs from cloud platforms, endpoints, applications, and network devices.
• Build and maintain security automation workflows and incident response playbooks using SOAR platforms.
• Automate security processes such as alert triage, threat enrichment, and response activities.
• Collaborate with Security Operations teams to improve detection capabilities, investigation efficiency, and incident response.
• Document technical procedures and recommend improvements to strengthen overall security operations.

Qualifications

• 3–8 years of experience in cybersecurity with a focus on SIEM, SOAR, or Security Operations.
• Experience working in a Security Operations Center (SOC) environment is an advantage.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Hands-on experience with one or more SIEM platforms such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, ArcSight, or Elastic.
• Experience with SOAR platforms and security automation.
• Proficiency in Python, PowerShell, Bash, or other scripting languages.
• Knowledge of cybersecurity frameworks such as MITRE ATT&CK, NIST, or CIS Contro
• Familiarity with EDR/XDR, IDS/IPS, firewall technologies, and cloud platforms including AWS, Azure, or GCP.