SIEM Administrator📣 Job Ad

About the Role at Site

Site (سايت), located in Riyadh, Saudi Arabia, is seeking a SIEM Administrator to join its team. This full-time position is crucial for maintaining and optimizing the organization's Security Information and Event Management (SIEM) platform, ensuring robust security monitoring and threat detection capabilities.

Role Purpose and Context

The SIEM Administrator is responsible for the effective administration, maintenance, and optimization of the SIEM platform to support comprehensive security monitoring, efficient log management, and accurate threat detection. This role focuses on integrating new log sources, developing and refining correlation rules, providing support for security monitoring activities, and continuously enhancing the overall effectiveness of the Security Operations Center (SOC).

Key Responsibilities

• Administer, configure, and maintain the SIEM platform to ensure high availability and optimal performance.
• Integrate and onboard log sources from various systems, including servers, endpoints, network devices, cloud services, and security solutions.
• Develop, optimize, and maintain correlation rules, detection use cases, dashboards, and alerts to enhance threat detection capabilities.
• Monitor SIEM platform health, troubleshoot performance issues, and ensure continuous log collection and data integrity.
• Perform log parsing, normalization, and validation to ensure accurate event correlation and reporting.
• Fine-tune SIEM rules and alert thresholds to minimize false positives while improving detection accuracy.
• Support SOC analysts by investigating SIEM-related issues and enhancing visibility into security events.
• Generate security reports, dashboards, and metrics to support operational and management reporting.
• Collaborate with security, infrastructure, and application teams to integrate new systems and improve monitoring coverage.
• Support SIEM platform upgrades, maintenance activities, and implementation of new security use cases.
• Maintain SIEM documentation, including log source inventory, correlation rules, and operational procedures.
• Contribute to the continuous improvement of SIEM architecture, detection capabilities, and SOC monitoring processes.

Qualifications and Experience

Candidates for this position should possess 2 to 5 years of experience in SIEM administration or a closely related cybersecurity role. A solid understanding of security monitoring principles, log management, and threat detection methodologies is required.

Work Environment and Location

This is a full-time position based in Riyadh, Saudi Arabia. The role operates within a dynamic cybersecurity environment, requiring collaboration with various technical teams.

Join Our Team

Site is committed to strengthening its cybersecurity posture, and the SIEM Administrator plays a vital role in achieving this objective through expert platform management and continuous security enhancement.