SIEM Administrator

About the Role

Site is seeking a SIEM Administrator to join their team in Riyadh, Saudi Arabia. This full-time, project-based role involves administering, maintaining, and optimizing the organization's Security Information and Event Management (SIEM) platform to ensure effective security monitoring, log management, and threat detection. The position requires 2-5 years of relevant experience.

Role Overview

The SIEM Administrator will focus on onboarding log sources, developing and tuning correlation rules, supporting security monitoring, and enhancing the overall effectiveness of the Security Operations Center (SOC). This role is critical for maintaining the integrity and performance of the SIEM platform and contributing to the organization's security posture.

Key Responsibilities

• Administer, configure, and maintain the SIEM platform to ensure high availability and optimal performance.
• Integrate and onboard log sources from various systems including servers, endpoints, network devices, cloud services, and security solutions.
• Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts to enhance threat detection capabilities.
• Monitor SIEM platform health, troubleshoot performance issues, and ensure continuous log collection and data integrity.
• Perform log parsing, normalization, and validation to ensure accurate event correlation and reporting.
• Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection accuracy.
• Support SOC analysts by investigating SIEM-related issues and enhancing visibility into security events.
• Generate security reports, dashboards, and metrics to support operational and management reporting.
• Collaborate with security, infrastructure, and application teams to integrate new systems and improve monitoring coverage.
• Support SIEM platform upgrades, maintenance activities, and implementation of new security use cases.
• Maintain SIEM documentation, including log source inventory, correlation rules, and operational procedures.
• Contribute to the continuous improvement of SIEM architecture, detection capabilities, and SOC monitoring processes.

Experience and Qualifications

• A minimum of 2-5 years of experience in SIEM administration or a related cybersecurity role.
• Demonstrated experience with SIEM platform configuration, maintenance, and optimization.
• Proficiency in developing and tuning correlation rules, detection use cases, and alerts.
• Experience with log source integration, parsing, normalization, and validation.

Work Environment

This is a full-time, project-based position located in Riyadh, Saudi Arabia, offering an opportunity to work within a dedicated team at Site.