SIEM Engineer - Sumo Logic

SIEM Engineer

Experience:

Minimum 10 years

Location:

Auburn Hills

Experience in SIEM build and engineering activities on Sumologic is mandatory. Engineering level experience in setting up the perform analysis of existing SIEM deployment architecture, log source integration, offense rule and report configurations. Plan for migration of existing deployment of client SIEM and other solution components to Sumologic platform. Produce low level and high level design documents. Review the deployment architecture, solution deployment guide documentation for approval & obtain sign off.

Perform installation, configuration and integration of Sumologic solution components such as MID servers, Data Gateways, DSM modules, etc. Perform configuration on Sumologic platform to port the existing offense rule configurations and reports. Perform minimum baseline security hardening to secure the Sumologic platform. Perform integration of log sources, threat intelligence platforms, SIEM tool monitoring, log analysis. Automate alerting and reporting processes and Sumologic SIEM & Automation Tool maintenance.

Perform Automation Tool SIR module integration with SIEM and enable the identified IR workflow automation. Update the solution deployment guide and provide handover to steady state operations. Conduct knowledge transfer session to operations team and obtain signoff from client stakeholder.