Back
HS
Senior Administrator - Security Analysis (SIEM)
HCLTech Sri Lankalinkedin.com
Oct 14, 2026, 2:26 PM1w ago
Full-timeColombo, Western ProvinceSecuritySenior (5+ yrs)
About the role
The Senior Administrator - Security Analysis (SIEM) will join the Cyber Security Operations team to monitor, analyze, and respond to security events and threats using SIEM technologies. The role involves incident investigation, root cause analysis, handling escalated technical and security incidents, and mentoring junior team members. The position also focuses on improving security operations, collaborating with cross-functional teams, and utilizing SOAR platforms and automation tools to enhance operational efficiency. The ideal candidate will have significant experience in security operations, SIEM platforms, and incident response within an enterprise SOC environment.
Must have
- 5 to 8 years of experience in Security Operations, SIEM monitoring, threat detection, incident response, and security event analysis within an enterprise SOC environment.
- Strong experience with SIEM technologies such as Splunk, QRadar, ArcSight, Microsoft Sentinel, LogRhythm, or similar platforms.
- Expertise in Security Event Analysis and incident investigation.
- Experience in technical solution implementation and troubleshooting within Security Operations Centers (SOC).
- Solid understanding of: Security Operations Center (SOC) processes, Incident Response and Incident Management, Threat Detection and Analysis, Log Management and Correlation, Security Monitoring and Alert Handling
- Knowledge of SOAR platforms and security automation techniques.
- Strong analytical, problem-solving, and decision-making skills.
- Excellent communication and stakeholder management abilities.
Nice to have
- Bachelor's degree in information security, Computer Science, Information Technology, or a related field.
- Relevant certifications are highly desirable: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CompTIA Security+, Microsoft Security Certifications, Splunk / QRadar / Sentinel Certifications
Technologies
- Azure
- CISM
- CISSP
- CompTIA Security+
- QRadar
- Microsoft Sentinel
- SIEM
- Splunk