Administrator - Security Investigations, SIEM

Job Summary

The Security Operations Administrator plays a critical role in managing security event investigations and implementing technical solutions for Security Information and Event Management (SIEM) systems. This position is essential for ensuring a high level of customer satisfaction by effectively resolving incidents, providing on-call support, and conducting thorough root cause analyses.

Key Responsibilities

1. Conduct Security Event Investigations Using Soar Tools To Identify, Analyze, And Respond To Security Incidents, Ensuring Compliance With Quality Standards And Regulatory Requirements.
2. Provide On-Call Support For Escalated Security Incidents, Performing Root Cause Analysis To Determine Underlying Issues And Facilitate Prompt Resolution.
3. Enhance Operational Efficiency By Updating And Managing The Knowledge Base, And Facilitating Training Sessions For New Employees And Coaching For Analysts.
4. Independently Resolve Tickets Within The Agreed Sla, Utilizing Technical Skills In Security Event Investigation And Soar To Maintain A High Resolution Rate.
5. Drive Positive Customer Experiences By Achieving First Call Resolution Metrics And Minimizing The Rate Of Rejected Resolutions And Reopened Cases.

Skill Requirements

1. Proficient In Security Event Investigation And Incident Response Using Soar Tools.
2. Solid Understanding Of Siem Technologies And Their Implementation For Threat Detection And Response.
3. Familiarity With Regulatory Compliance Standards Related To Security Operations.
4. Strong Analytical Skills For Conducting Root Cause Analysis And Resolving Incidents Effectively.
5. Excellent Communication Skills For Training And Coaching Team Members.

Other Requirements

1. Optional But Valuable Certifications: Certified Information Systems Security Professional (Cissp), Certified Incident Handler (Gcih), Or Security+ Certification