SIEM Admin

Experience : 4+ Yrs

Job Location : Mumbai

About the Role

Configure, and maintain the SIEM platform (e.g., ELK, Splunk, QRadar, ArcSight, LogRhythm, Sentinel, etc.). Develop and fine-tune correlation rules, alerts, and dashboards to support SOC use cases. Onboard log sources from various platforms (Windows, Linux, cloud, network devices, applications). Perform health checks, upgrades, and patch management of SIEM components. Work closely with SOC analysts to improve detection capabilities and reduce false positives. Collaborate with threat intel and incident response teams to create advanced detection logic. Automate log ingestion and alert tuning using scripting (Python, PowerShell, etc.). Develop and maintain documentation, runbooks, and standard operating procedures (SOPs).

Responsibilities

• Configure, and maintain the SIEM platform (e.g., ELK, Splunk, QRadar, ArcSight, LogRhythm, Sentinel, etc.)
• Develop and fine-tune correlation rules, alerts, and dashboards to support SOC use cases
• Onboard log sources from various platforms (Windows, Linux, cloud, network devices, applications)
• Perform health checks, upgrades, and patch management of SIEM components
• Work closely with SOC analysts to improve detection capabilities and reduce false positives
• Collaborate with threat intel and incident response teams to create advanced detection logic
• Automate log ingestion and alert tuning using scripting (Python, PowerShell, etc.)
• Develop and maintain documentation, runbooks, and standard operating procedures (SOPs)

Qualifications

Beneficial :

Required Skills

Preferred Skills

Location : Mumbai-Powai

Pay range and compensation package

Not specified in the provided job description.

Equal Opportunity Statement

We are committed to diversity and inclusivity.

```