Browse categories
Explore
Fiverr Pro
English
$
USD
I will deploy and configure a wazuh siem for your infrastructure
Wazuh SIEM Deployment and SOAR Automation Engineer
I'm a DevOps and Security Operations Engineer working daily with Wazuh, QRadar, Defender XDR, and Shuffle SOAR in a live SOC. I deploy and tune Wazuh SIEM end-to-end, write custom decoders and detecti...
About this Gig
Off-the-shelf Wazuh installs are noisy and rarely tuned to your logs. I deploy Wazuh the way it needs to run in production: manager, indexer, and dashboard properly connected, agents enrolled across your real environment, and detection rules written for your actual log sources.
I'm a DevOps & Security Operations Engineer who works with Wazuh, QRadar, Defender XDR, and ELK daily in a live SOC - this is what I do full-time.
What you get: full stack install (manager, indexer, dashboard); agents across Linux, Windows, macOS; custom decoders/rules for firewalls, EDR, hypervisors, network gear; alerts routed to Slack, email, or webhook; noise reduction tuned against real log samples.
Ideal for: teams needing a working SIEM without a full-time hire, startups prepping for SOC 2/PCI-DSS/HIPAA audits, MSPs standing up client monitoring, and anyone stuck after a DIY install.
Before we start, I'll ask about your environment for accurate scope.
Tools:
Docker
•
Jenkins
Frameworks:
Ansible
Cloud Provider:
Amazon Web Services
•
Digital Ocean
Programming language:
Bash
•
Python
Expertise:
Installation
•
Configuration
My Portfolio
FAQ
Do I need to already have servers set up?
Yes - you'll need the infrastructure (VM, cloud instance, or on-prem server) ready with SSH/RDP access. I handle the Wazuh installation and configuration on top of it.
Can you work with my existing Wazuh install instead of a fresh one?
Yes. Send me access details and a summary of what's currently configured, and I'll scope the tuning/fix work accordingly (may adjust price depending on the state of the setup).
What information do you need from me before starting?
Number and OS of hosts to monitor, whether it's cloud or on-prem, any existing log sources you want parsed, and where you want alerts sent.
Do you provide ongoing support after delivery?
Premium includes 7 days of post-delivery support. Extended support/retainer arrangements can be discussed separately.
Can you integrate this with QRadar, DFIR-IRIS, or a SOAR platform?
Yes - that's covered under Premium or as a custom offer. See my SOAR automation gig for deeper case-management/ticketing integration work.
