SIEM Lead Cyber Security

Required: Skills and Knowledge: Extensive experience with incident response tools such as SIEM (e.g., Splunk, QRadar, Microsoft Sentinel), EDR (e.g., CrowdStrike, Carbon Black), IDS/IPS (e.g., Snort, Suricata), and forensic tools (e.g., EnCase, FTK).Strong understanding of cybersecurity concepts, including network security, endpoint security, and threat detection. Proficiency in scripting languages (e.g., Python, PowerShell) for tool automation and integration. Demonstrated experience in deploying, configuring, and managing incident response tools in a large, complex environment. Ability to optimize tools for performance, including tuning alerts, refining rules, and integrating with other security systems. Knowledge of best practices for incident response tool management and the ability to implement these practices across the organization. Strong analytical skills to interpret data from various tools and identify patterns indicative of security incidents. Ability to troubleshoot issues with tools and resolve them in a timely manner. Experience in conducting root cause analysis and forensic investigations using incident response tools. Excellent written and verbal communication skills, with the ability to explain complex technical concepts to non technical stakeholders. Strong collaboration skills to work effectively with cross functional teams, including IT, legal, and compliance. Ability to develop and deliver training on the use of incident response tools to team members and other stakeholders Experience mentoring and guiding junior engineers in the use of incident response tools and best practices. Experience in Tool Management: