Log management ENGINEERS

• Must have strong understanding of security concepts, best practices and tools.
• Excellent understanding log format and source data for SIEM
• Ability to develop and enhance SIEM rules, queries, conditions, dashboard, reports etc.
• Understanding of log collection through SIEM connectors, NiFi, etc.
• Experience on multiple device logs integration with SIEM (Arcsight, Splunk, Qradar, etc.)
• Must have good understanding on security log baselining
• Experience on developing custom parsers

JOB RESPONSIBILITIES

• Coordinate with Development, Network, Infrastructure, and other organizations
• Provide Level 3 Support for Log Management issues.
• Debug day to day job issues in Log Management and provide solutions.
• Perform root cause analysis on failed components and implements corrective measures
• Provide ongoing information to leadership, customers, and peers regarding enhancements, innovations and solutions
• Perform Tuning and increase Operational efficiency on a continuous basis.
• Work with cross functional teams to set up production environment and enable solutions for business.
• Interact with business users to answer their queries and solve their problems.
• Able to help and Guide L1 or L2 support engineers to fix day-to-day Operational issues.
• Perform data migration, upgrades and database/ tool maintenance etc.
• Develop scripts to automate reports and maintenance activities.
• Strong knowledge on UNIX/ Linux skills