Senior Administrator - Security Investigations, SIEM

Job Summary

We are seeking an experienced SIEM Engineer to join our team on a project basis. The /680successful candidate will be responsible for the migration of our log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM. This is a unique opportunity to work on a high-profile project, leveraging your expertise in Security Information and Event Management systems.

The Sr. Security Ops Administrator plays a critical role in enhancing the security posture of the organization through advanced technical support and incident management. This position is responsible for troubleshooting complex security issues, performing root cause analysis, and implementing effective solutions. The successful candidate will contribute to a positive customer experience and uphold high-quality standards in support operations.

Key Responsibilities

Drive the technical aspects of migrating log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM \r\n\r\nDesign and implement a comprehensive migration plan, ensuring minimal disruption to existing security operations \r\n\r\nDevelop and maintain documentation on the new SIEM system, including configuration guides, user manuals, and troubleshooting procedures \r\n\r\nCollaborate with cross-functional teams, including Security Operations, IT, and Compliance, to ensure a smooth transition and seamless integration with existing systems and processes \r\n\r\nIdentify and mitigate potential risks and issues during the migration process \r\n\r\nDevelop and execute comprehensive testing plans to validate the functionality and performance of the new SIEM system \r\n\r\nProvide training and support to security analysts and engineers on the use and management of CrowdStrike Next Gen SIEM

1. Conduct Security Event Investigations Using Soar Tools, Ensuring Adherence To Quality Standards And Regulatory Requirements While Providing Technical Solutions For Identified Threats. 
2. Analyze Complex Incidents Escalated By Analysts, Performing Root Cause Analysis And Implementing Effective Resolutions To Mitigate Technical And Security Challenges.
3. Develop And Maintain Knowledge Base Articles And Training Materials, Providing Coaching And Mentorship To Junior Analysts To Enhance Team Capabilities.
4. Collaborate With Cross-Functional Support Teams To Resolve Complex Tickets Within Agreed Slas, Ensuring Seamless Security Operations And A Robust Security Posture.
5. Drive Positive Customer Experiences By Achieving First Call Resolution, Minimizing Rejected Resolutions, And Effectively Addressing And Mitigating Security Threats.

Skill Requirements

3+ years of experience in designing, implementing, and managing SIEM systems (Splunk or similar) \r\n\r\nIn-depth knowledge of log collection, parsing, and analysis \r\n\r\nExperience with threat detection and incident response methodologies

1. Strong Understanding Of Security Event Investigation Methodologies And Soar Tools. 
2. Proficiency In Siem Solutions For Effective Incident Detection And Response.
3. Solid Knowledge Of Troubleshooting Techniques And Root Cause Analysis In A Security Context.
4. Experience In Developing Knowledge Base Content And Providing Training To Team Members.
5. Excellent Communication Skills To Collaborate Effectively With Stakeholders And Customers.

Other Requirements

3+ years of experience in designing, implementing, and managing SIEM systems (Splunk or similar) \r\n\r\nIn-depth knowledge of log collection, parsing, and analysis \r\n\r\nExperience with threat detection and incident response methodologies

1. Optional But Valuable Certifications: Certified Information Systems Security Professional (Cissp), Security+ Or Certified Information Security Manager (Cism)