Incedo Inc. is seeking a Senior SIEM Engineer to administer, optimize, and maintain enterprise Security Information and Event Management platforms in a Security Operations Center (SOC) or Managed Security Service Provider (MSSP) environment.
The successful candidate will have hands-on experience in SIEM platform administration, log-source onboarding, custom parsing, event normalization, detection engineering, threat hunting, and performance optimization.
Key Responsibilities:
- Administer, maintain, and optimize enterprise SIEM platforms.
- Onboard log sources and develop custom parsers, field extraction, and log normalization.
- Develop and optimize correlation rules, detection use cases, and threat-hunting queries aligned with MITRE ATT&CK.
- Create searches, dashboards, and reports while reducing false positives.
- Monitor SIEM health, event processing, indexing, storage, and platform performance.
- Troubleshoot production issues and support upgrades, patching, and critical incidents.
- Integrate logs from firewalls, IDS/IPS, EDR, Windows/Linux systems, cloud platforms, applications, and identity systems.
- Support log collection using Syslog, CEF, LEEF, JSON, XML, and custom formats.
- Assist with automation, SOAR integrations, documentation, and continuous service improvement.
Required Experience and Qualifications:
- 5–8 years of cybersecurity experience, including at least 4 years in SIEM or security platform engineering.
- Hands-on experience in enterprise SOC/MSSP environments, preferably supporting 24×7 operations.
- Strong troubleshooting, analytical, documentation, and client communication skills.
- SIEM vendor certifications or certifications such as Security+, CySA+, GCIH, or GCIA are preferred.
Benefits will be discussed during interview.
Incedo is a global AI, data, and digital transformation company that helps enterprises modernize technology platforms and improve business outcomes. Its capabilities include AI and data solutions, digital engineering, application modernization, cyber... Read More
