SIEM Chronicle Engineer
4 weeks ago
Position : (SIEM) Chronicle Engineer.
Location : Pan India (Remote - Hybrid).
Type : Full-time with Buxton.
Work you'll do :
- As a SIEM(Chronicle) Engineer you will be managing and providing SIEM(Chronicle) health and operational support, including supporting to architecture changes, tool deployments and advanced detection engineering.
- You will be closely working with Security Operations Center (SOC), Threat Intelligence, Threat Hunt, Automation and Orchestration teams to develop and operationalize meaningful security alerting and ensuring platform health and uptime.
- SIEM(Chronicle) configuration management, troubleshooting, addressing complex issues and day to day operations management.
- Onboard data sources develop new and custom parsers and SIEM(Chronicle) architecture assessment and design reviews.
- Deliver advisory support and education relating to the SIEM to other technology personnel and to technology management.
- Help define, implement and monitor key risk indicators and key performance indicators (KRIs/KPIs).
- Keep abreast of latest IT security, regulatory and compliance trends to support various risk\data models.
- Develop detection engineering roadmaps for clients.
- Develop, test, peer review security alerts on SIEM(Chronicle) platform.
- Coordinating with fellow engineers, hunters, analysts and supporting advanced detection rules for our clients.
- Help structure our content development pipelines across clients based on the maturity of the client environments as well as the latest trends in security.
- Review system security plans, network diagrams, vulnerability and patching requirements.
- Develop scripts to simplify data collection and other necessary automation for log ingestion and other tasks as needed.
- Writing and reviewing technical documentation for various work products, examples High level use case descriptions, technical descriptions for use cases, Testing documentation, parsers and associated documentation, runbooks etc.
- Submitting documentation through the QRM process.
- 24/7 on-call support (as needed).
- Leading engineering for two or more clients, taking ownership, and being the central point of contact for escalations.
- Managing and providing knowledge transfer to Junior SIEM Engineers as you grow within the firm.
- Coordinate with various technical groups and attend in-person client meetings.
- Build relationship with client counterparts (i.e Lead Security Engineer or manager on Client side).
- Adhere to internal operational security and other Client policies.
- Participate in short term project work as assigned.
Required skills :
- Bachelor of engineering or Science in computers, information systems, information security, Math, decision sciences, risk management, or other business/technology disciplines or equivalent work experience.
- CISSP, CEH or equivalent.
- Able to work in shifts on a rotating basis for 24X7.
- Three to five years' experience in security information and/or technology engineering support.
- Experience with the following technologies : leading SIEM technologies IDS/IPS, network and host based firewalls, data leakage protection (DLP), common EDR platforms etc.
- Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, exfiltration, credential access, etc.
- An understanding of the Cyber Kill Chain, the MITRE attack framework, various TTPs described within and commonly used by attackers as well as how to write detection rules for them in SIEM and EDR solution.
- Understanding of tools, technologies and logging mechanism including understanding to common network devices such as routers, switches, load balancers etc.
- Understanding of typical cloud threats and knowledge of how to detect and prevent them, cloud logging and audit capabilities and the ability to develop detection rules around these.
- Understanding of basic networking protocols such as IP, DNS, HTTP, and the network stack.
- Basic knowledge in system security architecture and security solutions.
Preferred skills :
- Excellent interpersonal and organizational skills.
- Excellent oral and written communication skills.
- Strong analytical and problem-solving skills.
- Self-motivated to improve knowledge and skills.
- A strong desire to understand the what as well as the why and the how of security incidents.
-
SIEM Chronicle Engineer
4 weeks ago
Bengaluru, Karnataka, India Buxton Consulting (INDIA) Private Limited Full timeAbout the RoleAs a SIEM Chronicle Engineer at Buxton Consulting (INDIA) Private Limited, you will play a critical role in managing and providing SIEM Chronicle health and operational support. This includes supporting architecture changes, tool deployments, and advanced detection engineering.Key ResponsibilitiesSIEM Management: Manage and provide SIEM...
-
Principal Detection Engineer
3 hours ago
Bengaluru, India System Two Security Full timeJob Title: Principal Security EngineerExperience Required: 10-15 yearsOverview:We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle, Yara-L, and BigQuery, with a focus on building robust detections from scratch and leveraging...
-
Cyber Security Expert
4 months ago
Bengaluru, Karnataka, India Tekfocus Minds Pvt Ltd Full time**Job description** Understand customer requirements and recommend best practices related to SIEM operations. Identify, develop, and document SIEM use cases, rules, correlations, dashboards for IT & OT environments, addressing emerging threats and customer needs. At least 4+ years of experience in SIEM engineering, cybersecurity, or a related role. -...
-
Principal Detection Engineer
13 hours ago
Bengaluru, India System Two Security Full timeJob Title: Principal Security EngineerExperience Required: 10-15 yearsOverview:We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle, Yara-L, and BigQuery, with a focus on building robust detections from scratch and leveraging...
-
Principal Detection Engineer
4 hours ago
Bengaluru, India System Two Security Full timeJob Title: Principal Security Engineer Experience Required: 10-15 years Overview: We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle , Yara-L , and BigQuery , with a focus on building robust detections from scratch and...
-
SIEM Security Engineer
4 weeks ago
Bengaluru, Karnataka, India Buxton Consulting (INDIA) Private Limited Full timeJob Title: SIEM Security EngineerJob Overview:We are seeking a highly skilled SIEM Security Engineer to join our team at Buxton Consulting (INDIA) Private Limited. As a SIEM Security Engineer, you will be responsible for managing and providing SIEM health and operational support, including supporting architecture changes, tool deployments, and advanced...
-
Bengaluru, India System Two Security Full timeJob Title: Principal Security EngineerExperience Required: 10-15 yearsOverview:We are looking for a Principal Security Engineer who excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise in Chronicle , Yara-L , and BigQuery , with a focus on building robust detections from scratch and...
-
Bengaluru, India System Two Security Full timeJob Title: Principal Security EngineerExperience Required:10-15 yearsOverview:We are looking for aPrincipal Security Engineerwho excels at designing, implementing, and optimizing advanced threat detection systems. The role demands hands-on expertise inChronicle ,Yara-L , andBigQuery , with a focus on building robust detections from scratch and leveraging...
-
Senior Security Engineer
3 weeks ago
Bengaluru, India CareerXperts Consulting Full timeSIEM Architecture and Design : .- Design, implement, and maintain a robust SIEM infrastructure based on Microsoft Sentinel.- Develop and optimize SIEM workflows, rules, and alerts to detect and respond to security threats.- Collaborate with security teams to define and implement SIEM use cases and reporting requirements. SIEM Deployment and Maintenance : .-...
-
Senior SIEM Engineer
5 months ago
Bengaluru, India Thomson Reuters Full timeSenior SIEM Engineer: The Information Security and Risk Management (ISRM) organization is seeking a Senior SIEM Engineer to join our growing SIEM & Cyber Fusion Engineering team. This candidate will join a team in managing a large enterprise deployment of Splunk and Enterprise Security and partnering with our SOC, CIRT, Threat Detection, and Cyber Intel...
-
SIEM Security Operations Specialist
1 month ago
Bengaluru, Karnataka, India Wow Jobs (Wow Softech Pvt. Ltd) Full timeSIEM Engineer Role OverviewAt Wow Jobs (Wow Softech Pvt. Ltd), we are seeking a skilled SIEM Engineer to manage and provide SIEM health and operational support. This includes supporting architecture changes, tool deployments, and advanced content development.Key Responsibilities:- Perform SIEM configuration management and troubleshooting, addressing complex...
-
Iam - siem - splunk engineer
2 days ago
Bengaluru, India Tata Consultancy Services Full timeGreetingsTCS is hiring for IAM - SIEM - Splunk EngineerExperience: 6 - 8 YearsLocation: Bengaluru
-
IAM - SIEM - Splunk Engineer
4 days ago
Bengaluru, India Tata Consultancy Services Full timeGreetingsTCS is hiring for IAM - SIEM - Splunk EngineerExperience: 6 - 8 YearsLocation: Bengaluru
-
IAM - SIEM - Splunk Engineer
4 days ago
Bengaluru, India Tata Consultancy Services Full timeGreetings TCS is hiring for IAM - SIEM - Splunk Engineer Experience: 6 - 8 Years Location: Bengaluru
-
Cyber Security Engineer for SIEM Solutions
3 days ago
Bengaluru, Karnataka, India CyberProof Full timeJob DescriptionCyberProof, a leading cyber security services and platform company, seeks a highly skilled QRadar SIEM Engineer to join our global Security Operations Team.About the RoleThis is an exciting opportunity to work with a comprehensive cyber security platform and mitigation services. As a QRadar SIEM Engineer, you will be responsible for...
-
Security Information and Event Management
1 month ago
Bengaluru, Karnataka, India ScaleneWorks Full timeJob SummaryAs a Security Information and Event Management (SIEM) Engineer at ScaleneWorks, you will be responsible for managing SIEM infrastructure like Microsoft Azure Sentinel and other SIEMs. You will work with Microsoft Azure cloud platform, log analytics workspaces, and have excellent knowledge of KQL (Kusto Query Language).Key Responsibilities Design...
-
Cybersecurity Engineer
3 weeks ago
Bengaluru, Karnataka, India Thomson Reuters Full timeAbout the RoleIn this exciting opportunity as a Cybersecurity Engineer, you will be responsible for ensuring the stability and security of our Splunk and Enterprise Security SIEM platform. This role is critical to identifying and remediating potential threats and defects, as well as collaborating with our SOC, CIRT, Threat Detection, and Cyber Intel teams to...
-
SIEM Engineer
3 months ago
Bengaluru, India 5100 Kyndryl Solutions Private Limited Full timeWho We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The...
-
Senior SIEM Engineer
5 months ago
Bengaluru, India Thomson Reuters Full timeAbout the Role In this opportunity as Sr SIEM Engineer, you will: Be responsible for monitoring and stability of Splunk, and Enterprise Security SIEM platform Embed automation into the deployment and management of the infrastructure and application Identify and remediate of SIEM application defects / process failures Onboard new application and...
-
Cloud Security Engineer
2 weeks ago
Bengaluru, Karnataka, India YASH Technologies Full timeJob SummaryYASH Technologies is seeking a highly skilled Cloud Security Engineer to join our team. As a Cloud Security Engineer, you will be responsible for designing, implementing, and managing cloud-based security solutions using Azure Sentinel and SIEM.Key Responsibilities:Develop and implement custom use cases for cloud security environmentsConfigure and...