SIEM Chronicle Engineer

4 weeks ago

Bengaluru, India Buxton Consulting (INDIA) Private Limited Full time

Position : (SIEM) Chronicle Engineer.

Location : Pan India (Remote - Hybrid).

Type : Full-time with Buxton.

Work you'll do :

- As a SIEM(Chronicle) Engineer you will be managing and providing SIEM(Chronicle) health and operational support, including supporting to architecture changes, tool deployments and advanced detection engineering.

- You will be closely working with Security Operations Center (SOC), Threat Intelligence, Threat Hunt, Automation and Orchestration teams to develop and operationalize meaningful security alerting and ensuring platform health and uptime.

- SIEM(Chronicle) configuration management, troubleshooting, addressing complex issues and day to day operations management.

- Onboard data sources develop new and custom parsers and SIEM(Chronicle) architecture assessment and design reviews.

- Deliver advisory support and education relating to the SIEM to other technology personnel and to technology management.

- Help define, implement and monitor key risk indicators and key performance indicators (KRIs/KPIs).

- Keep abreast of latest IT security, regulatory and compliance trends to support various risk\data models.

- Develop detection engineering roadmaps for clients.

- Develop, test, peer review security alerts on SIEM(Chronicle) platform.

- Coordinating with fellow engineers, hunters, analysts and supporting advanced detection rules for our clients.

- Help structure our content development pipelines across clients based on the maturity of the client environments as well as the latest trends in security.

- Review system security plans, network diagrams, vulnerability and patching requirements.

- Develop scripts to simplify data collection and other necessary automation for log ingestion and other tasks as needed.

- Writing and reviewing technical documentation for various work products, examples High level use case descriptions, technical descriptions for use cases, Testing documentation, parsers and associated documentation, runbooks etc.

- Submitting documentation through the QRM process.

- 24/7 on-call support (as needed).

- Leading engineering for two or more clients, taking ownership, and being the central point of contact for escalations.

- Managing and providing knowledge transfer to Junior SIEM Engineers as you grow within the firm.

- Coordinate with various technical groups and attend in-person client meetings.

- Build relationship with client counterparts (i.e Lead Security Engineer or manager on Client side).

- Adhere to internal operational security and other Client policies.

- Participate in short term project work as assigned.

Required skills :

- Bachelor of engineering or Science in computers, information systems, information security, Math, decision sciences, risk management, or other business/technology disciplines or equivalent work experience.

- CISSP, CEH or equivalent.

- Able to work in shifts on a rotating basis for 24X7.

- Three to five years' experience in security information and/or technology engineering support.

- Experience with the following technologies : leading SIEM technologies IDS/IPS, network and host based firewalls, data leakage protection (DLP), common EDR platforms etc.

- Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, exfiltration, credential access, etc.

- An understanding of the Cyber Kill Chain, the MITRE attack framework, various TTPs described within and commonly used by attackers as well as how to write detection rules for them in SIEM and EDR solution.

- Understanding of tools, technologies and logging mechanism including understanding to common network devices such as routers, switches, load balancers etc.

- Understanding of typical cloud threats and knowledge of how to detect and prevent them, cloud logging and audit capabilities and the ability to develop detection rules around these.

- Understanding of basic networking protocols such as IP, DNS, HTTP, and the network stack.

- Basic knowledge in system security architecture and security solutions.

Preferred skills :

- Excellent interpersonal and organizational skills.

- Excellent oral and written communication skills.

- Strong analytical and problem-solving skills.

- Self-motivated to improve knowledge and skills.

- A strong desire to understand the what as well as the why and the how of security incidents.

(ref:hirist.tech)

  • SIEM Chronicle Engineer

    3 weeks ago

    Bengaluru, Karnataka, India Buxton Consulting (INDIA) Private Limited Full time

    About the RoleAs a SIEM Chronicle Engineer at Buxton Consulting (INDIA) Private Limited, you will play a critical role in managing and providing SIEM Chronicle health and operational support. This includes supporting architecture changes, tool deployments, and advanced detection engineering.Key ResponsibilitiesSIEM Management: Manage and provide SIEM...

  • Cyber Security Expert

    4 months ago

    Bengaluru, Karnataka, India Tekfocus Minds Pvt Ltd Full time

    **Job description** Understand customer requirements and recommend best practices related to SIEM operations. Identify, develop, and document SIEM use cases, rules, correlations, dashboards for IT & OT environments, addressing emerging threats and customer needs. At least 4+ years of experience in SIEM engineering, cybersecurity, or a related role. -...

  • SIEM Security Engineer

    4 weeks ago

    Bengaluru, Karnataka, India Buxton Consulting (INDIA) Private Limited Full time

    Job Title: SIEM Security EngineerJob Overview:We are seeking a highly skilled SIEM Security Engineer to join our team at Buxton Consulting (INDIA) Private Limited. As a SIEM Security Engineer, you will be responsible for managing and providing SIEM health and operational support, including supporting architecture changes, tool deployments, and advanced...

  • Senior Security Engineer

    2 weeks ago

    Bengaluru, India CareerXperts Consulting Full time

    SIEM Architecture and Design : .- Design, implement, and maintain a robust SIEM infrastructure based on Microsoft Sentinel.- Develop and optimize SIEM workflows, rules, and alerts to detect and respond to security threats.- Collaborate with security teams to define and implement SIEM use cases and reporting requirements. SIEM Deployment and Maintenance : .-...

  • Senior SIEM Engineer

    5 months ago

    Bengaluru, India Thomson Reuters Full time

    Senior SIEM Engineer: The Information Security and Risk Management (ISRM) organization is seeking a Senior SIEM Engineer to join our growing SIEM & Cyber Fusion Engineering team. This candidate will join a team in managing a large enterprise deployment of Splunk and Enterprise Security and partnering with our SOC, CIRT, Threat Detection, and Cyber Intel...

  • SIEM Security Operations Specialist

    4 weeks ago

    Bengaluru, Karnataka, India Wow Jobs (Wow Softech Pvt. Ltd) Full time

    SIEM Engineer Role OverviewAt Wow Jobs (Wow Softech Pvt. Ltd), we are seeking a skilled SIEM Engineer to manage and provide SIEM health and operational support. This includes supporting architecture changes, tool deployments, and advanced content development.Key Responsibilities:- Perform SIEM configuration management and troubleshooting, addressing complex...

  • Senior SIEM Engineer

    1 month ago

    Bengaluru, Karnataka, India Thomson Reuters Full time

    About the RoleIn this opportunity, you will be responsible for monitoring and stability of Splunk, and Enterprise Security SIEM platform. You will embed automation into the deployment and management of the infrastructure and application, identify and remediate SIEM application defects / process failures, onboard new application and platform logs via syslog,...

  • Iam - siem - splunk engineer

    3 hours ago

    Bengaluru, India Tata Consultancy Services Full time

    GreetingsTCS is hiring for IAM - SIEM - Splunk EngineerExperience: 6 - 8 YearsLocation: Bengaluru

  • IAM - SIEM - Splunk Engineer

    1 day ago

    Bengaluru, India Tata Consultancy Services Full time

    Greetings TCS is hiring for IAM - SIEM - Splunk Engineer Experience: 6 - 8 Years Location: Bengaluru

  • IAM - SIEM - Splunk Engineer

    2 days ago

    Bengaluru, India Tata Consultancy Services Full time

    GreetingsTCS is hiring for IAM - SIEM - Splunk EngineerExperience: 6 - 8 YearsLocation: Bengaluru

  • Cyber Security Engineer for SIEM Solutions

    22 hours ago

    Bengaluru, Karnataka, India CyberProof Full time

    Job DescriptionCyberProof, a leading cyber security services and platform company, seeks a highly skilled QRadar SIEM Engineer to join our global Security Operations Team.About the RoleThis is an exciting opportunity to work with a comprehensive cyber security platform and mitigation services. As a QRadar SIEM Engineer, you will be responsible for...

  • Security Information and Event Management

    1 month ago

    Bengaluru, Karnataka, India ScaleneWorks Full time

    Job SummaryAs a Security Information and Event Management (SIEM) Engineer at ScaleneWorks, you will be responsible for managing SIEM infrastructure like Microsoft Azure Sentinel and other SIEMs. You will work with Microsoft Azure cloud platform, log analytics workspaces, and have excellent knowledge of KQL (Kusto Query Language).Key Responsibilities Design...

  • Cybersecurity Engineer

    2 weeks ago

    Bengaluru, Karnataka, India Thomson Reuters Full time

    About the RoleIn this exciting opportunity as a Cybersecurity Engineer, you will be responsible for ensuring the stability and security of our Splunk and Enterprise Security SIEM platform. This role is critical to identifying and remediating potential threats and defects, as well as collaborating with our SOC, CIRT, Threat Detection, and Cyber Intel teams to...

  • SIEM Engineer

    2 months ago

    Bengaluru, India 5100 Kyndryl Solutions Private Limited Full time

    Who We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The...

  • Senior SIEM Engineer

    5 months ago

    Bengaluru, India Thomson Reuters Full time

    About the Role In this opportunity as Sr SIEM Engineer, you will: Be responsible for monitoring and stability of Splunk, and Enterprise Security SIEM platform Embed automation into the deployment and management of the infrastructure and application Identify and remediate of SIEM application defects / process failures Onboard new application and...

  • Cloud Security Engineer

    1 week ago

    Bengaluru, Karnataka, India YASH Technologies Full time

    Job SummaryYASH Technologies is seeking a highly skilled Cloud Security Engineer to join our team. As a Cloud Security Engineer, you will be responsible for designing, implementing, and managing cloud-based security solutions using Azure Sentinel and SIEM.Key Responsibilities:Develop and implement custom use cases for cloud security environmentsConfigure and...

  • SOC Manager

    3 weeks ago

    Bengaluru, India YASH Technologies Full time

    SOC Manager– Azure Sentinel /SIEM Engineer – Azure SentinelLocation: Pune, Bangalore, Hyderabad & IndoreJob Description:Minimum 8+ years of experience in developing use cases customized to the environment.Work on Cloud SIEM project implementations for various customers in different locations, starting with estimating the SIEM configuration to successful...

  • Soc manager

    2 weeks ago

    Bengaluru, India YASH Technologies Full time

    SOC Manager– Azure Sentinel /SIEM Engineer – Azure SentinelLocation: Pune, Bangalore, Hyderabad & IndoreJob Description:Minimum 8+ years of experience in developing use cases customized to the environment.Work on Cloud SIEM project implementations for various customers in different locations, starting with estimating the SIEM configuration to successful...

  • SOC Manager

    3 weeks ago

    Bengaluru, India YASH Technologies Full time

    SOC Manager– Azure Sentinel /SIEM Engineer – Azure SentinelLocation: Pune, Bangalore, Hyderabad & Indore Job Description:Minimum 8+ years of experience in developing use cases customized to the environment.Work on Cloud SIEM project implementations for various customers in different locations, starting with estimating the SIEM configuration to successful...

  • SOC Manager

    3 weeks ago

    Bengaluru, India YASH Technologies Full time

    SOC Manager– Azure Sentinel /SIEM Engineer – Azure SentinelLocation: Pune, Bangalore, Hyderabad & Indore Job Description:Minimum 8+ years of experience in developing use cases customized to the environment.Work on Cloud SIEM project implementations for various customers in different locations, starting with estimating the SIEM configuration to successful...