Cyber Security Engineer

Position: SIEM Engineer

Job Description: The SIEM Engineer will have full ownership of the Security Logs Data Pipeline, including:

• Design, implementation, calibration, and proactive maintenance of IT infrastructure within the SIEM environment.
• Ingestion, analysis, processing, and indexing of log data in the SIEM system from a variety of IT technologies.

The SIEM Engineer is responsible for continuously deriving value from various monitoring systems related to cybersecurity events and incidents. The core responsibility involves the IT infrastructure required to ensure successful detection, identification, and response to cybersecurity alerts and incidents. In addition to ensuring the continuity and effectiveness of the monitoring systems and data flow channels, the SIEM Engineer is also responsible for managing the IT systems lifecycle that supports the organization (including managing personal computers and user accounts).

Knowledge and Experience Requirements:

1. Practical knowledge and experience in the installation, calibration, troubleshooting, and proactive maintenance of IT systems, including:

• Computer networking
• Operating systems (client and server environments based on Windows and Unix)
• Security-focused systems (including Firewalls, IDPS, NAC)
• Cloud-based IT systems (with a focus on Azure and AWS), including networking and operating systems as described above
• User account management (local and cloud-based) and central management solutions (AD and Entra)

1. Practical knowledge and experience in integrating information systems with monitoring systems, including:

• Mechanisms for collecting system logs, verifying data flow integrity, and performing continuous and accurate indexing.

1. Significant advantage for knowledge and experience in the following:

• Strong familiarity with configuring and calibrating monitoring activities in Azure (including familiarity with Sentinel and KQL)
• Practical experience in integrating monitoring technologies (systems and protocols), including Arcsight, Elastic, Syslog, Sysmon, WEF

Professional Skills and Abilities:

• High ability to understand faults and identify issues as part of structured processes to achieve solutions.
• Analytical thinking, critical thinking, and creativity in addressing IT challenges.
• Ability to work as part of a team with close collaboration with analysts working on SIEM systems.
• Ability to work effectively and cooperatively with external IT stakeholders (e.g., clients).
• Strong communication and writing skills in both Hebrew and English.