At Sporty, we are committed to fostering a secure and sustainable future. As a highly skilled and experienced Security Monitoring Administrator, you will be part of a dynamic team dedicated to enhancing our company's security posture. Your role will involve the administration, maintenance, and continuous improvement of EDR and SIEM platforms, ensuring that all security alerts are accurate, actionable, and provide comprehensive visibility across endpoints, servers, cloud infrastructure, and corporate systems. You will be responsible for tuning detection rules, reducing false positives, and optimizing alert fidelity to improve the overall security monitoring capabilities of the organization.
Key responsibilities include:
- Administer, maintain, and monitor EDR and SIEM environments
- Tune detection rules, correlation logic, and security policies to improve detection quality and reduce false positives
- Configure and maintain endpoint policies, agent health, log collection, and platform integrations
- Develop and maintain dashboards, reports, alerts, and security use cases
- Investigate noisy or ineffective detections and continuously improve alert fidelity
- Validate endpoint protection, log collection, and response capabilities
- Integrate new log sources and improve visibility across endpoints, servers, cloud services, and network infrastructure
- Convert findings from incidents, threat intelligence, vulnerability assessments, and offensive security exercises into improved monitoring content
- Monitor platform health, storage, agent connectivity, licensing, and overall service availability
- Support the Information Security team during security investigations by improving visibility, detections, and response workflows
- Work with Infrastructure and IT teams to onboard new systems into EDR and SIEM
- Produce operational documentation, standard operating procedures, and platform runbooks
- Track detection coverage, platform performance, and continuous improvement initiatives
Qualifications include:
- Experience administering enterprise SIEM, XDR, or EDR platforms
- Hands-on experience with Wazuh, Trend Micro Vision One, Microsoft Defender XDR, Microsoft Sentinel, Elastic Security, Splunk, or similar platforms
- Strong understanding of endpoint security, Windows, Linux, macOS, Active Directory, cloud environments, and network security
- Tuning detection rules and reducing false positives
- Familiarity with log collection, parsing, correlation, and security event analysis
- Understanding of MITRE ATT&CK and common attacker techniques
- Experience writing automation or scripting using Python, PowerShell, or Bash
- Strong analytical and troubleshooting skills
- Excellent documentation and communication skills
This role offers:
- Competitive salary plus individual performance-based bonuses every quarter
- 28 days paid annual leave
- Core working hours of 10am-3pm in your local time zone, with flexibility outside of these hours
- Referral bonuses and flash bonuses
- Top-of-the-line equipment
- Annual company retreats that provide opportunities to connect and collaborate with colleagues from around the world
If you're interested, please apply! Every application is reviewed by a member of our team, and we aim to respond within 48 hours.
