Wazuh Engineer

In this role, I will expect you to monitor and analyze security events across endpoints, networks, cloud, and email systems. You will be utilizing correlation rules and behavioral analytics to identify suspicious activity and detect multi-stage attacks that span across various layers of our infrastructure. Investigating alerts to determine the root causes of security incidents will be part of your duties. I will need you to coordinate automated or manual responses to contain and remediate threats while collaborating with our SOC teams to escalate and resolve critical issues. You will also collect and normalize log data from diverse sources like firewalls, servers, and applications, as well as build dashboards and reports to visualize threat patterns and system health. Tuning SIEM rules to reduce false positives will be a key task, as will implementing playbooks for automated threat response, especially in XDR platforms. Furthermore, you will be responsible for integrating SIEM/XDR tools with other security solutions and enhancing workflows and data parsing through scripting.