Senior Administrator - Security Analysis, SIEM
About the role
The Senior Administrator (Security Analysis, SIEM) at HCLTech Sri Lanka is responsible for monitoring, analyzing, and responding to security events using SIEM tools to detect and mitigate threats. The role involves providing advanced technical support for escalated security incidents, conducting root cause analysis, and implementing robust solutions. Additional responsibilities include leading knowledge management initiatives, coaching and mentoring security analysts, resolving complex support tickets, and contributing to process improvements and security projects. The ideal candidate will have advanced proficiency in security event analysis, hands-on experience with SIEM tools, strong technical acumen, and excellent communication skills. A bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience, is required.
Must have
- Advanced proficiency in security event analysis and hands-on experience with SIEM tools (e.g., Splunk, ArcSight, QRadar, etc.).
- Strong technical acumen in implementing security solutions and troubleshooting complex incidents.
- In-depth understanding of security operations, incident management processes, and best practices.
- Familiarity with SOAR (Security Orchestration, Automation, and Response) platforms for automating security workflows.
- Excellent analytical, problem-solving, and attention-to-detail skills.
- Outstanding communication and interpersonal abilities to collaborate effectively across teams.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Nice to have
- Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or Security+ are highly valued.
- Experience in managing knowledge bases, delivering technical training, or participating in process improvement initiatives.
- Exposure to global security standards and regulatory frameworks is an advantage.
Technologies
- CISM
- CISSP
- CompTIA Security+
- QRadar
- SIEM
- Splunk
Highlights
The position is onsite in Colombo, Sri Lanka. Professional certifications such as CISSP, CISM, or Security+ are highly valued but not mandatory. Experience with global security standards and regulatory frameworks is considered an advantage.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka