Information Security Engineer - SIEM

Key Responsibilities

• Monitor and respond to security incidents, alerts, and threats across the organization.
• Conduct vulnerability assessments, risk analysis, and security audits.
• Implement and maintain security tools such as firewalls, antivirus, SIEM, IDS/IPS, and endpoint protection solutions.
• Develop, review, and enforce information security policies, standards, and procedures.
• Ensure compliance with security frameworks and regulations such as ISO 27001, GDPR, SOC 2, or PCI-DSS.
• Perform security assessments for applications, infrastructure, and cloud environments.
• Collaborate with IT and business teams to identify and mitigate security risks.
• Support incident response activities including investigation, containment, recovery, and reporting.
• Conduct user awareness and cybersecurity training programs.
• Maintain documentation related to security controls, incidents, and audit findings.
• Stay updated with emerging cybersecurity threats, technologies, and best Skills & Qualifications :
• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 2 to 6 years of experience in information security or cybersecurity roles.
• Strong understanding of network security, endpoint security, cloud security, and risk management.
• Experience with security monitoring and incident management tools.
• Knowledge of operating systems, networking concepts, and security protocols.
• Familiarity with vulnerability management and penetration testing concepts.
• Understanding of compliance and governance standards.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and documentation Certifications :
• CEH (Certified Ethical Hacker)
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CompTIA Security+
• ISO 27001 Lead Technical Skills :
• SIEM tools (Splunk, QRadar, Sentinel, etc.)
• Firewall and VPN management
• Cloud platforms such as AWS, Azure, or GCP
• Endpoint Detection & Response (EDR) tools
• Identity and Access Management (IAM)
• Basic scripting knowledge (Python, PowerShell, Bash)

• Attention to detail
• Ability to work under pressure
• Team collaboration and coordination
• Strong decision-making and incident handling capabilities

(ref:hirist.tech)