SIEM Content Engineer-Moorestown, NJ - Georgia IT Inc.
Moorestown, NJ
About the Job
SIEM Content Engineer
Location: Moorestown, NJ (Phila may be an option)
Duration: Contract (12+ months)
"U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time.."
Description
Location: Moorestown, NJ (Phila may be an option)
Duration: Contract (12+ months)
"U.S. Citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time.."
Description
- Support and maintain the SIEM infrastructure inclusive of the OS, application software, appliances, and databases
- Provide and support requirements for system health monitoring, remediation, event log collection and analysis
- Performs deployment, testing, and validation of infrastructure enhancements and system components
- Provide actionable and proactive engineering plans to management to support ever increasing availability, capacity, and capability requirements of the SIEM
- Works with operational teams to develop and improve monitoring solutions, plan and schedule maintenance, and implementing changes
- Develop standards and procedures for managing, monitoring, and updating systems and applications
- Log source onboarding review, use case requirement gathering and documentation
- Understanding of log source parsing needs and methods
- Development of correlation rules based on identified requirements
- Tuning of existing rules to enhance detection capabilities
- Perform cyclical evaluation of SIEM content to enhance processes and capabilities
- Communicates progress of work in progress, key initiatives, and walkthroughs on complex designs and architecture
- Works under immediate supervision - Typically reports to a supervisor or manager
Source : Georgia IT Inc.
