SIEM Platform Administrator

This role involves administering and maintaining the SIEM platform to ensure high availability and optimal performance while configuring and normalizing logs from various security devices. The position requires developing correlation rules, troubleshooting log issues, and integrating security technologies to enhance detection capabilities and reduce false positives. Additionally, the role includes performing health checks, implementing retention policies, and collaborating with SOC Analysts and other teams to support incident investigations and system upgrades.