Senior SIEM Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Lead the comprehensive implementation or integration of SIEM solutions within customer environments.

• Analyze customer business needs and the relevant threat landscape of their industry to create customized use cases for security and incident monitoring.

• Collaborate with customers to set up collectors and agents within their on-premises networks for efficient data collection and forwarding.

• Partner with customers to design and implement secure data flows into the Securonix cloud, adhering to industry best practices.

• Work alongside service delivery managers, management, engineering, maintenance, and operational support teams to ensure prompt service delivery.

• Create content, use cases, data models, dashboards, and connectors to meet unique user requirements.

• Diagnose and resolve end-to-end network and infrastructure challenges during the data onboarding process.

• Deploy and integrate the Securonix SOAR solution with customer infrastructures for effective response orchestration.

• Engage with customers and internal product development teams to collect user requirements, propose new product features, and enhance existing functionalities.

• Train and empower customers and partners to ensure successful adoption of the solutions.

⛳️ Requirements

• Over 8 years of experience in the information security and SIEM domain.

• Strong familiarity with SIEM solutions including Splunk, Qradar, ArcSight, Logrhythm, and Exabeam.

• Proven experience in deploying SIEM solutions across various customer environments.

• Solid understanding of MITRE ATT&CK matrices, kill chains, and other attack models.

• Excellent communication skills and experience in customer-facing roles.

• Proficient in scripting languages such as Python and Powershell.

• Relevant industry certifications such as CISSP or CISM.

• 3 to 4+ years of experience in UEBA deployment.

• Familiarity with machine learning applications in cybersecurity.

• Knowledge of cloud technologies including Amazon, Azure, and Google.

• Good understanding of log collection methodologies and aggregation techniques such as Syslog-NG, syslog, Nxlog, and Windows Event Forwarding.

• Familiarity with the Hadoop ecosystem and Apache technologies.

• Experience in integrating endpoint security and host-based intrusion detection solutions.

• Knowledge of network forensics and tools such as Wireshark, PCAP, and tcpdump.

🏝️ Benefits

• Health Insurance with a total sum insured of INR 7,50,000.

• Coverage includes self, spouse, 2 children, dependent parents, or parents-in-law.

• Personal Accident insurance with a total sum insured of INR 10,00,000.

• Term Life Insurance providing a sum assured equal to 5 times the fixed base pay for employees.