SIEM ADMINISTRATOR-MANILA

SIEM Admin

Position Summary: The SIEM Administrator is responsible for the design, maintenance, optimization, and daily operational support of the organization’s SIEM platforms within the Security Operations Center (SOC). This role ensures reliable log ingestion, parsing, correlation, and data availability to support threat detection, incident response, and compliance requirements. A strong understanding of Splunk, Microsoft Sentinel, and Google SecOps is essential.

Responsibilities and Duties

Platform Administration & Engineering

Deploy, configure, and maintain SIEM platforms, primarily Splunk, MS Sentinel, and Google SecOps. Manage data onboarding: log ingestion pipelines, connectors, API integrations, and event routing. Develop and maintain parsers, normalization schemas, and correlation rules. Ensure platform availability, scalability, and performance through routine health checks and optimization. Maintain access controls, RBAC, and platform...