Administrator - Security Information And Event Management (SIEM)

Job Summary

The Security Incident Administrator plays a crucial role in ensuring the stability and security of IT operations by independently resolving security incident tickets, providing on-call support, and conducting thorough root cause analyses. This position significantly contributes to enhancing customer satisfaction and maintaining quality standards within the organization.

Key Responsibilities

1. Implement And Manage Security Information And Event Management (Siem) Solutions To Monitor, Detect, And Respond To Security Incidents Effectively.

2. Conduct Root Cause Analyses For Escalated Security Incidents, Identifying Underlying Issues And Implementing Corrective Actions To Prevent Recurrence.

3. Provide On-Call Support For Critical Incidents, Ensuring Timely Resolution And Adherence To Quality Standards And Regulatory Requirements.

4. Develop And Maintain A Knowledge Base By Documenting Solutions And Best Practices, Contributing To Team Training And Knowledge Sharing.

5. Independently Resolve Security-Related Tickets Within Agreed Service Level Agreements (Slas), Ensuring Minimal Disruption To Customer Operations.

6. Enhance Customer Experience By Achieving First Call Resolution And Reducing The Number Of Rejected Resolutions And Reopened Cases.

Skill Requirements

1. Proficient In Security Incident Response And Technical Solution Implementation With Siem Tools.

2. Solid Understanding Of Incident Management Processes And Best Practices.

3. Familiarity With Regulatory Compliance Standards Related To It Security.

4. Strong Analytical Skills For Conducting Root Cause Analysis And Problem Resolution.

5. Excellent Communication Skills For Customer Interaction And Knowledge Sharing.

Other Requirements

1. Optional Certifications: Certified Information Systems Security Professional (Cissp), Certified Incident Handler (Gcih)