Endpoint, SIEM, Splunk , Log Management & XDR Specialist VaporVM

Engineer 1 Endpoint,
SIEM, Splunk , Log Management & XDR Specialist

1 XDR

Vendors / : Palo Alto
Cortex XDR, Kaspersky EPP

Key Responsibilities
/ :

• Deploy, manage, and
  maintain XDR and EPP agents across all
  endpoints and servers.
  XDR EPP
  .
• Investigate and
  respond to malware, exploits, and fileless
  attack incidents.
  
  .
• Optimize detection by
  tuning security policies and reducing false positives.
  
  .
• Integrate endpoint
  telemetry with SIEM/XDR platforms for unified
  visibility.
  SIEM/XDR .
• Prepare and
  deliver monthly endpoint risk and compliance reports.
  
  .
• Design, deploy, and
  manage Splunk SIEM architecture including indexers,
  forwarders, and syslog collectors.
  SIEM Splunk Syslog.
• Integrate logs
  from firewalls, endpoints, NDR, DLP, WAF, SOAR, cloud, and SaaS
  platforms into a unified SIEM.
  NDR DLP WAF SOAR SIEM .
• Develop custom
  detection rules, dashboards, and correlation searches to identify
  threats.
  
  .
• Tune and
  optimize syslog parsing, field extractions, and indexing to
  ensure performance and cost efficiency.
  Syslog
  .
• Collaborate
  with Threat Intelligence & SOAR (Engineer 8) to
  automate response workflows.
  
  ( 8) .
• Manage log
  retention policies to ensure compliance with frameworks
  like NCA, PCI DSS, and GDPR.
  
  NCA PCI
  DSS GDPR.
• Deliver weekly
  security dashboards and monthly SIEM health and detection
  performance reports.
  
  SIEM .