SilverSky

Security Engineer

• Deploy, configure, & maintain security platforms (SIEM/SOAR, EDR/XDR, firewalls, IDS/IPS, cloud security tools).
• Integrate customer environments into the security stack.
• Automate & script security workflows to support SOC operations.
• Create utilities for normalization and standardization of logs, such as parsers.
• Administrate log flow routes, such as APIs, webhooks, syslogs, collectors, etc.
• Maintain updates and patches for SIEMs and supporting systems, including SOAR integrations.
• Create, monitor, and triage health and availability alarms of SIEMs and supported systems.
• Troubleshoot security tools, data ingestion, & integration issues.
• Collaborate with SOC analysts & customers to tune detection rules, reduce false positives, & improve alert quality.
• Provide escalated technical support to SOC analysts during investigations and analysis of security incidents when needed.
• Maintain detailed documentation of SOC tool configurations, integrations & maintenance activities.