SIEM Chronicle Engineer

4 weeks ago


Bengaluru, India Buxton Consulting (INDIA) Private Limited Full time

Position : (SIEM) Chronicle Engineer.

Location : Pan India (Remote - Hybrid).

Type : Full-time with Buxton.

Work you'll do :

- As a SIEM(Chronicle) Engineer you will be managing and providing SIEM(Chronicle) health and operational support, including supporting to architecture changes, tool deployments and advanced detection engineering.

- You will be closely working with Security Operations Center (SOC), Threat Intelligence, Threat Hunt, Automation and Orchestration teams to develop and operationalize meaningful security alerting and ensuring platform health and uptime.

- SIEM(Chronicle) configuration management, troubleshooting, addressing complex issues and day to day operations management.

- Onboard data sources develop new and custom parsers and SIEM(Chronicle) architecture assessment and design reviews.

- Deliver advisory support and education relating to the SIEM to other technology personnel and to technology management.

- Help define, implement and monitor key risk indicators and key performance indicators (KRIs/KPIs).

- Keep abreast of latest IT security, regulatory and compliance trends to support various risk\data models.

- Develop detection engineering roadmaps for clients.

- Develop, test, peer review security alerts on SIEM(Chronicle) platform.

- Coordinating with fellow engineers, hunters, analysts and supporting advanced detection rules for our clients.

- Help structure our content development pipelines across clients based on the maturity of the client environments as well as the latest trends in security.

- Review system security plans, network diagrams, vulnerability and patching requirements.

- Develop scripts to simplify data collection and other necessary automation for log ingestion and other tasks as needed.

- Writing and reviewing technical documentation for various work products, examples High level use case descriptions, technical descriptions for use cases, Testing documentation, parsers and associated documentation, runbooks etc.

- Submitting documentation through the QRM process.

- 24/7 on-call support (as needed).

- Leading engineering for two or more clients, taking ownership, and being the central point of contact for escalations.

- Managing and providing knowledge transfer to Junior SIEM Engineers as you grow within the firm.

- Coordinate with various technical groups and attend in-person client meetings.

- Build relationship with client counterparts (i.e Lead Security Engineer or manager on Client side).

- Adhere to internal operational security and other Client policies.

- Participate in short term project work as assigned.

Required skills :

- Bachelor of engineering or Science in computers, information systems, information security, Math, decision sciences, risk management, or other business/technology disciplines or equivalent work experience.

- CISSP, CEH or equivalent.

- Able to work in shifts on a rotating basis for 24X7.

- Three to five years' experience in security information and/or technology engineering support.

- Experience with the following technologies : leading SIEM technologies IDS/IPS, network and host based firewalls, data leakage protection (DLP), common EDR platforms etc.

- Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, exfiltration, credential access, etc.

- An understanding of the Cyber Kill Chain, the MITRE attack framework, various TTPs described within and commonly used by attackers as well as how to write detection rules for them in SIEM and EDR solution.

- Understanding of tools, technologies and logging mechanism including understanding to common network devices such as routers, switches, load balancers etc.

- Understanding of typical cloud threats and knowledge of how to detect and prevent them, cloud logging and audit capabilities and the ability to develop detection rules around these.

- Understanding of basic networking protocols such as IP, DNS, HTTP, and the network stack.

- Basic knowledge in system security architecture and security solutions.

Preferred skills :

- Excellent interpersonal and organizational skills.

- Excellent oral and written communication skills.

- Strong analytical and problem-solving skills.

- Self-motivated to improve knowledge and skills.

- A strong desire to understand the what as well as the why and the how of security incidents.

(ref:hirist.tech)

  • Bengaluru, Karnataka, India Buxton Consulting (INDIA) Private Limited Full time

    About the RoleAs a SIEM Chronicle Engineer at Buxton Consulting (INDIA) Private Limited, you will play a critical role in managing and providing SIEM Chronicle health and operational support. This includes supporting architecture changes, tool deployments, and advanced detection engineering.Key ResponsibilitiesSIEM Management: Manage and provide SIEM...


  • Bengaluru, India System Two Security Full time

    Job Title: Principal Security EngineerExperience Required: 10-15 yearsOverview:We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle, Yara-L, and BigQuery, with a focus on building robust detections from scratch and leveraging...

  • Cyber Security Expert

    4 months ago


    Bengaluru, Karnataka, India Tekfocus Minds Pvt Ltd Full time

    **Job description** Understand customer requirements and recommend best practices related to SIEM operations. Identify, develop, and document SIEM use cases, rules, correlations, dashboards for IT & OT environments, addressing emerging threats and customer needs. At least 4+ years of experience in SIEM engineering, cybersecurity, or a related role. -...


  • Bengaluru, India System Two Security Full time

    Job Title: Principal Security EngineerExperience Required: 10-15 yearsOverview:We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle, Yara-L, and BigQuery, with a focus on building robust detections from scratch and leveraging...


  • Bengaluru, India System Two Security Full time

    Job Title: Principal Security Engineer Experience Required: 10-15 years Overview: We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle , Yara-L , and BigQuery , with a focus on building robust detections from scratch and...


  • Bengaluru, Karnataka, India Buxton Consulting (INDIA) Private Limited Full time

    Job Title: SIEM Security EngineerJob Overview:We are seeking a highly skilled SIEM Security Engineer to join our team at Buxton Consulting (INDIA) Private Limited. As a SIEM Security Engineer, you will be responsible for managing and providing SIEM health and operational support, including supporting architecture changes, tool deployments, and advanced...


  • Bengaluru, India System Two Security Full time

    Job Title: Principal Security EngineerExperience Required: 10-15 yearsOverview:We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle , Yara-L , and BigQuery , with a focus on building robust detections from scratch and...


  • Bengaluru, India System Two Security Full time

    Job Title: Principal Security EngineerExperience Required:10-15 yearsOverview:We are looking for aPrincipal Security Engineerwho excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise inChronicle ,Yara-L , andBigQuery , with a focus on building robust detections from scratch and leveraging...


  • Bengaluru, India CareerXperts Consulting Full time

    SIEM Architecture and Design : .- Design, implement, and maintain a robust SIEM infrastructure based on Microsoft Sentinel.- Develop and optimize SIEM workflows, rules, and alerts to detect and respond to security threats.- Collaborate with security teams to define and implement SIEM use cases and reporting requirements. SIEM Deployment and Maintenance : .-...

  • Senior SIEM Engineer

    5 months ago


    Bengaluru, India Thomson Reuters Full time

    Senior SIEM Engineer: The Information Security and Risk Management (ISRM) organization is seeking a Senior SIEM Engineer to join our growing SIEM & Cyber Fusion Engineering team. This candidate will join a team in managing a large enterprise deployment of Splunk and Enterprise Security and partnering with our SOC, CIRT, Threat Detection, and Cyber Intel...


  • Bengaluru, Karnataka, India Wow Jobs (Wow Softech Pvt. Ltd) Full time

    SIEM Engineer Role OverviewAt Wow Jobs (Wow Softech Pvt. Ltd), we are seeking a skilled SIEM Engineer to manage and provide SIEM health and operational support. This includes supporting architecture changes, tool deployments, and advanced content development.Key Responsibilities:- Perform SIEM configuration management and troubleshooting, addressing complex...


  • Bengaluru, India Tata Consultancy Services Full time

    GreetingsTCS is hiring for IAM - SIEM - Splunk EngineerExperience: 6 - 8 YearsLocation: Bengaluru


  • Bengaluru, India Tata Consultancy Services Full time

    Greetings TCS is hiring for IAM - SIEM - Splunk Engineer Experience: 6 - 8 Years Location: Bengaluru


  • Bengaluru, India Tata Consultancy Services Full time

    GreetingsTCS is hiring for IAM - SIEM - Splunk EngineerExperience: 6 - 8 YearsLocation: Bengaluru


  • Bengaluru, Karnataka, India CyberProof Full time

    Job DescriptionCyberProof, a leading cyber security services and platform company, seeks a highly skilled QRadar SIEM Engineer to join our global Security Operations Team.About the RoleThis is an exciting opportunity to work with a comprehensive cyber security platform and mitigation services. As a QRadar SIEM Engineer, you will be responsible for...


  • Bengaluru, Karnataka, India ScaleneWorks Full time

    Job SummaryAs a Security Information and Event Management (SIEM) Engineer at ScaleneWorks, you will be responsible for managing SIEM infrastructure like Microsoft Azure Sentinel and other SIEMs. You will work with Microsoft Azure cloud platform, log analytics workspaces, and have excellent knowledge of KQL (Kusto Query Language).Key Responsibilities Design...

  • Splunk Admin

    7 hours ago


    Bengaluru, India Tata Consultancy Services Full time

    Job Title: Splunk AdminYears of experience: 3-15yrsWalk in date: 14-Dec (Saturday)Timings: 9AM-1PMInterview Location: Tata Consultancy Services, Think campus, Phase 2, Electronic City, Bengaluru, Karnataka 560100Engineer, implement & support SIEM platforms ArcSight, Splunk Enterprise, Splunk Enterprise Security, Splunk UBEA and Splunk Phantom in public cloud...


  • Bengaluru, Karnataka, India Thomson Reuters Full time

    About the RoleIn this exciting opportunity as a Cybersecurity Engineer, you will be responsible for ensuring the stability and security of our Splunk and Enterprise Security SIEM platform. This role is critical to identifying and remediating potential threats and defects, as well as collaborating with our SOC, CIRT, Threat Detection, and Cyber Intel teams to...

  • SIEM Engineer

    3 months ago


    Bengaluru, India 5100 Kyndryl Solutions Private Limited Full time

    Who We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The...

  • Senior SIEM Engineer

    5 months ago


    Bengaluru, India Thomson Reuters Full time

    About the Role In this opportunity as Sr SIEM Engineer, you will: Be responsible for monitoring and stability of Splunk, and Enterprise Security SIEM platform Embed automation into the deployment and management of the infrastructure and application Identify and remediate of SIEM application defects / process failures Onboard new application and...