SIEM Admin _ Hyderabad & Mumbai

We are hiring for SIEM Admin L2 & L3.

Experience : 5+ Years

Location : Mumbai & Hyderabad

Work Mode : Work from Office

JD :

This is a core technical IC role which requires candidate to be hands on and ability to deliver the below tasks independently.

Ownership of SIEM platform in terms of administration and management ( should be currently performing this role)

Ensuring platform and service uptime

Efficient management of the platform to ensure proper performance.

Upgrade and updates (KBs) / patch as per OEM

Platform capacity management

Administration and management of underlying Infrastructure Layer

Log Source Integration to include development of custom parsers for non-supported log sources

Integration with other platforms like Threat Intelligence

Configuration of SOAR plugins

Advanced troubleshooting of the SIEM platform

Problem management. Working closely with OEM

Configuration of rules reports and dashboards based on inputs from monitoring team.

Documentation of RCAs for major incidents

Other skills required

Ability to interact and manage customer stakeholders in the context of platform management.

Good team working skills and communication.

Technology and skills

SIEM : LogRhythm OR other industry leading SIEM platforms

SOAR : SIEM native of any third party

Threat Intelligence and Brand Monitoring (Cyble, IzooLogic)

ISTM tools - Everest is preferred or any other industry leading product.

Scripting : Regex is mandatory.

OS : Windows and Linux (intermediate skills)

Good knowledge of security domain is mandatory

Working Window

Should be flexible to work in shifts and on demand for any weekend activities

Experience / Skills / Qualifications

Education Qualification – B.E / B.Tech / Msc / MCA / M.Tech / Bsc / BCA

Certifications

CISSP or CISM is preferred.