- Configure the LogRhythm to collect logs from various sources across the organization and identify the critical systems and devices that generate security-relevant logs and ensure that the SIEM tool is collecting those logs.- The logs collected by the SIEM tool may be in different formats and structures. Responsible to ensure that the logs are parsed and normalized to ensure consistency and accuracy in the log analysis process.- Ensure that the logs are stored securely and efficiently. Define the log storage policy, such as how long to retain the logs, where to store them, and how to secure them from unauthorized access.- Analyze the logs collected by the SIEM tool to identify potential security threats or incidents. Identify suspicious or anomalous behavior that could indicate a security breach.- Ensure that the SIEM tool is running smoothly and that it is up to date with the latest security patches and updates. Configure the SIEM to meet the different compliance and security requirements.- Ensure that the logs are audited to track changes to the log collection, storage, and analysis process. Ensure that the logs are audited for compliance purposes, such as regulatory compliance and internal policies.- Identify potential security threats, such as unusual patterns of network traffic, unusual user behavior, or abnormal system activity. Once a potential threat has been identified, investigate the threat further to determine its severity and potential impact on the organization. Escalate the threat to the incident response team for further investigation and response.

Managing and monitoring the security of an organization's computer systems, networks, and data. The role is responsible for implementing security measures, identifying and mitigating security threats, and ensuring compliance with industry standards and regulations.- Conduct vulnerability scans on computer systems and networks- Analyze scan results to identify vulnerabilities and potential threats- Prioritize vulnerabilities based on risk and severity- Develop and implement recommendations for mitigating identified vulnerabilities- Provide regular reports on scan results and remediation efforts- Collaborate with IT and other departments to ensure compliance with security policies and standards- Stay up-to-date with the latest security technologies and trends- Manage relationships with third-party security vendors and consultants