Senior Administrator
About the role
The Senior Administrator (Security Analysis, SIEM) at HCLTech Sri Lanka is responsible for monitoring, analyzing, and responding to security events using SIEM tools to detect and mitigate threats. The role involves providing advanced technical support for escalated security incidents, conducting root cause analysis, and implementing robust solutions. Additional responsibilities include leading knowledge management initiatives, coaching and mentoring security analysts, resolving complex support tickets, and collaborating with cross-functional teams to ensure effective security operations. The position is based onsite in Colombo and requires a strong background in security event analysis, incident management, and hands-on experience with SIEM tools.
Must have
- Advanced proficiency in security event analysis and hands-on experience with SIEM tools (e.g., Splunk, ArcSight, QRadar, etc.).
- Strong technical acumen in implementing security solutions and troubleshooting complex incidents.
- In-depth understanding of security operations, incident management processes, and best practices.
- Familiarity with SOAR (Security Orchestration, Automation, and Response) platforms for automating security workflows.
- Excellent analytical, problem-solving, and attention-to-detail skills.
- Outstanding communication and interpersonal abilities to collaborate effectively across teams.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Nice to have
- Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or Security+ are highly valued.
- Experience in managing knowledge bases, delivering technical training, or participating in process improvement initiatives.
- Exposure to global security standards and regulatory frameworks is an advantage.
Technologies
- CISM
- CISSP
- CompTIA Security+
- QRadar
- SIEM
- Splunk
Highlights
The role is onsite in Colombo, Sri Lanka. Professional certifications such as CISSP, CISM, or Security+ are highly valued but not mandatory. Experience with global security standards and regulatory frameworks is considered an advantage.