Lead SOC Engineer (SIEM) (CPX)

The SOC Lead Engineer, SIEM has a vital role in the SOC that encompasses technical leadership, SIEM architecture design, and pre-sales support.

This position is responsible for overseeing the management and coordination of SIEM solutions, within the Security Operations Center (SOC).

The SOC Lead Engineer will guide senior and junior engineers in day-to-day operations across multiple environments and customers, while also assisting in pre-sales estimations of SIEM licenses.

Reporting to the Senior SOC Engineering & Architecture Manager, the SOC Lead Engineer, SIEM is a seasoned professional with over a decade of experience in SIEM operations.

Lead the technical operations and management of SIEM tools including Splunk, Sentinel, LogRhythm,Qradar and FortiSIEM.

Oversee the maintenance and functionality of the log collection layer, with a focus on tools like CRIBL.

Ensure the health and functionality of SIEM systems through regular checks and maintenance activities.

Oversee and manage SIEM licenses, including forecasting, tracking usage, and coordinating with sales for estimations and renewals.

Optimize SIEM telemetry to ensure efficient and accurate data collection, correlation, and reporting.

Develop and enforce logging standards across all customers, systems and platforms to maintain consistent and reliable log data Provide guidance and mentorship to SOC Engineers in managing and resolving issues related to SIEM services and log management.