I will configure open source siem using elk stack, graylog and grafana dashboards
Focused in designing cutting edge cyber security and Ai solutions
Level 1
Has met certain performance criteria and shows strong potential in the marketplace.
About this Gig
Hello, I am Hamza, a Cyber Security Expert with over 5 years+ of experience in developing and maintaining SIEM solutions for enterprise clients both in the cloud and on-premise. My expertise includes: Elasticsearch, Logstash,Kibana,Graylog,Grafana,zabbix,Wazuh,Elastalert,TheHive,Cortex,MISP,zeek,suricta,yara.
In my most recent role, I developed and maintained an open-source SIEM using Wazuh and other open-source tools to enhance the organization's cybersecurity measures.
My customizable SIEM solutions include:
Elasticsearch multi-cluster deployment
Fine-tuning
System monitoring
Network device and firewall logs monitoring
Multi-tenantcy
ILM/SLM policy and searchable snapshots
Software Vulnerabilities
Security Configuration Assessment (SCA)
Stop Brute Force Attacks
Compliance & Controls
Network Scan Summary
Threat intelligence security feeds and Latest Security Events.
Case management
System Inventory monitoring
My dedication to providing the best cybersecurity solutions can help enhance your security posture and protect your critical assets. Let's work together to keep your organization safe and secure.
Cloud provider:
Other
Cloud computing resource:
ELB
•
Route53
•
VPC
•
Security Groups
•
DNS
My Portfolio
FAQ
What do I need before placing an order?
You’ll need a VPS, dedicated server, or cloud instance (AWS, Azure, GCP, Contabo, etc.) with root/SSH access. I’ll guide you on selecting the right server specs based on your requirements.
Can you help me choose the right SIEM architecture for my organization?
Yes, I offer consultation to determine whether you need a single-node deployment or a distributed multi-node setup, depending on your environment size and use cases.
What operating systems do you support for deployment?
I primarily work with Linux-based systems (Ubuntu, Debian, CentOS, Rocky Linux), but I can also integrate Windows systems and devices through Wazuh agents.
Can you integrate firewalls, routers, and other network devices with SIEM?
Absolutely. I can onboard logs from firewalls, IDS/IPS systems, routers, switches, and cloud services into the SIEM for centralized monitoring.
Do you provide dashboards and visualizations in Grafana/Kibana?
Yes, I will create custom dashboards, visualizations, and alerts tailored to your security requirements.
Will I get threat intelligence integration?
: Yes, I can integrate threat feeds (like MISP, AbuseIPDB, AlienVault OTX) into your SIEM for real-time threat detection.
Can this SIEM help me with compliance (ISO 27001, GDPR, HIPAA, PCI DSS, etc.)?
Yes, Wazuh and ELK stack provide compliance modules and auditing features that can help align with standards like ISO 27001, GDPR, HIPAA, and PCI DSS.
What’s the difference between your Basic, Standard, and Premium packages?
Basic: Single-server setup (best for small setups or testing). Standard: Distributed deployment for up to 50 servers with configuration management integration. Premium: Enterprise-grade distributed deployment for up to 1000 servers, with advanced tuning and integrations.
Can you also install additional tools like TheHive, Cortex, or Velociraptor?
Yes, I can integrate SOAR and DFIR tools like TheHive, Cortex, and Velociraptor with your SIEM setup for advanced security operations.
1 reviews for this Gig
| (1) | ||
| (0) | ||
| (0) | ||
| (0) | ||
| (0) |
Rating Breakdown
- Seller communication level
- Quality of delivery
- Value of delivery
Sort By
A al_ghabban

Saudi Arabia
Outstanding Experience
$50
Price
2 days
Duration
Helpful?
1 reviews for this Gig
| (1) | ||
| (0) | ||
| (0) | ||
| (0) | ||
| (0) |
Rating Breakdown
- Seller communication level
- Quality of delivery
- Value of delivery
Sort By
A al_ghabban

Saudi Arabia
Outstanding Experience
$50
Price
2 days
Duration
Helpful?
