Senior Associate - Lead SIEM Engineer [T500-21560]

About Deutsche Börse Group :

Headquartered in Frankfurt, Germany, Deutsche Börse Group is a leading international exchange organization and market infrastructure provider. They empower investors, financial institutions, and companies by facilitating access to global capital markets.

Their India centre is located in Hyderabad, serves as a key strategic hub and comprises India’s top-tier tech talent. They focus on crafting advanced IT solutions that elevate market infrastructure and services. Deutsche Börse Group in India is composed of a team of capital market engineers forming the backbone of financial markets worldwide.

Your area of work :

In your new position, you will become a member of the Cyber Defense team, part of Group Security. Cyber Defense team is responsible for all aspects of Security Information and Event Management (SIEM), Computer Emergency Response (CERT), and Security Operations Center (SOC).

In the advertised position, you will be focused on the coordination with application teams to identify relevant log sources and ensure proper formatting, parsing, and secure transmission to the SIEM. You will also configure and validate log ingestion pipelines, including normalization, enrichment, and correlation rules to support threat detection and compliance use cases.

Your responsibilities :

• Engage with application owners to identify log sources, understand log formats, and define logging requirements aligned with security and compliance needs.
• Design and implement log ingestion workflows, including transport mechanisms (e.g., syslog, API, agent-based) and secure data handling practices.
• Configure parsing and normalization rules to ensure logs are structured correctly for correlation, alerting, and reporting within the SIEM.
• Validate log onboarding success by performing end-to-end testing, ensuring data completeness, accuracy, and timeliness.
• Maintain documentation for onboarded applications, including log source details, parsing logic, and use case mappings.
• Troubleshoot onboarding issues, offering suggestions for resolving parsing errors, ingestion delays, or misconfigured transport mechanisms.
• Collaborate with security teams to align log onboarding with detection use cases, compliance requirements, and threat intelligence integration.

Your profile :