Senior Security Engineer SIEM Deployment and Content Development

Job Description

The following are the duties the employee can expect, but not limited to:Implement Securonix and other SIEM solutionsPerform on-boarding of new clientsPerform data ingestion from different log sources into the SIEM solutionTroubleshoot and resolve data ingestion issuesPerform data quality check on ingested dataTroubleshoot and resolve data quality issues in the Securonix SIEM solutionManage SIEM backend infrastructureDevelop content for Securonix Snypr platform for SIEM and UEBA modulesDevelop cyber threat models that can be utilized in the SIEM solution for threat detection based on inputs from the SOC teamManage day to day SIEM operational tasksTroubleshoot and resolve SIEM infrastructure related issuesDocument SIEM implementation and deploymentCreate SIEM and SOC related operational documentationIntegrate and share information with other analysts and other teamsProvide threat and vulnerability analysis as well as security advisory servicesPerform regular health checks on SIEM infrastructure and data collection nodesImplement various security solutions as and when requiredManage interactions with internal and external clientsSupport the SOC team and client in the incident response processAnalyze and respond to previously undisclosed software and hardware vulnerabilitiesPerform root cause analysis, document findings and collaborate with technology/process owners to prevent future occurrencesParticipate in the documentation process to ensure accuracy of documentation critical to the teams successAssist with the development of new content and tuning existing content for SIEM, IDS, and other security technologiesInteract with other IT personnel, sometimes of different nationalities. Salary: OMR 2,500 to 3,000 per month inclusive of fixed allowances. REQUIREMENTS: Senior Security Engineer Deployment and Content Development for Securonix (Next Generation SIEM Solution & UEBA)PROFESSIONAL COMPETENCIESHands-on deployment of Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA) solutionsAt least 5+ years experience working in deploying and managing SIEM solutions like Securonix, Exabeam, Splunk, LogRhythm, AlienVault, ArcSight, QRadar and Nitro ESMAt least 3+ years experience working in the field of Content development and worked for delivering and/or building content on Securonix, Splunk, AlienVault, ArcSight, QRadar, Nitro ESMExperience in developing custom parsersSolid networking fundamentalsSolid experience with Linux/Unix operating environments (configuration and troubleshooting)Strong analytical skills to understand data and come up with use cases to enhance detectionStrong understanding with information security technologies such as Firewall, VPN, Intrusion detection tools, Malware tools, Authentication tools, endpoint technologies, and cloud security toolsStrong understanding of APT kill chain frameworks like MITRE, Lockheed Martin etc.Experience in Cyber Security technologies and concepts such as insider threat, malware, lateral movement, beaconing, ransomware, data theft, fraudExperience working with regular expressions and understanding of YARA rulesStrong programming background with advanced skills in Java, MySQL, Hadoop is preferred.Experience in coding using Core Java and related technologies, scripting languages like Bash, Python etc.Experience in working with Hadoop/Relational databases/SQL queries.Proven skills in technical writing, verbal communications, consulting, and problem solving in a rapidly changing technical environmentProven experience being team-oriented and self-motivated, with a keen attentionto detail and the ability to work independentlyAbility to effectively communicate and work with individuals from diverse backgrounds or cultures.Good understanding of Incident Management and ResponseExperience in security device management and SIEMIn-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.Experience in threat managementKnowledge of various operating system flavors including but not limited to Windows, Linux, UnixKnowledge of applications, databases, middleware to address security threats against the same.Excellent communication skillsAbility to handle high pressure situations with key stakeholdersGood Analytical skills, Problem solving and Interpersonal skillsWorking knowledge and experience with MS office with proficiency in Excel and PowerPoint

Keyskills :

About Company

National Security Services Group (NSSG) is a cyber security firm located in the Sultanate of Oman.

NSSG is designed to assist the private and government sectors determine their in-depth threats and provide solutions in coordination with our partners, which alleviates and reduces the risk in the every growing world today.

NSSG seeks only the best and most qualified personnel to lead companies and governments alike, into the future.