SIEM Engineer II
Securonix, Inc.18 hours ago
Bengaluru, IndiaMid Level
Responsibilities
- Lead end-to-end SIEM implementations and integrations in customer environments.
- Develop security monitoring use cases based on customer requirements and industry threat landscapes.
- Deploy collectors and agents and implement secure data flows into the Securonix cloud.
- Develop content, use cases, data models, dashboards, and connectors for custom requirements.
- Troubleshoot network and infrastructure issues during data onboarding.
- Deploy and integrate Securonix SOAR with customer infrastructure for response orchestration.
- Coordinate with service delivery, management, engineering, maintenance, and operational support teams.
- Gather user requirements, recommend product improvements, and train customers and partners.
Requirements
- 4+ years of experience in information security and SIEM.
- Strong understanding of SIEM solutions including Splunk, Qradar, ArcSight, Logrhythm, and Exabeam.
- Experience deploying SIEM across multiple customers and interacting with customers in technical environments.
- Understanding of MITRE ATT&CK, kill chains, and other attack models.
- Strong communication skills and customer-facing experience.
- Strong knowledge of scripting languages such as Python and PowerShell.
- A BS in Computer Science, Information Systems, or CyberSecurity is preferred.
- 3-4+ years of UEBA deployment experience is preferred.
- Working knowledge of machine learning in cybersecurity and cloud technologies such as Amazon, Azure, and Google is preferred.
- Knowledge of log collection and aggregation technologies, Hadoop and Apache ecosystems, endpoint security, host-based intrusion detection, network forensics, Wireshark, PCAP, and tcpdump is preferred.
Benefits
- Health insurance with INR 7,50,000 total sum insured covering the employee, spouse, two children, and dependent parents or parents-in-law.
- Personal accident insurance with INR 10,00,000 total sum insured.
- Term life insurance with coverage equal to five times fixed base pay.
About Securonix, Inc.
Securonix builds a cloud-native security operations platform that unifies SIEM, UEBA, SOAR, threat intelligence, and TDIR for enterprise security teams. Its subscription software runs on AWS/Snowflake and is used by global enterprises and managed security service providers to detect, investigate, and respond to threats. Founded in 2008 and headquartered in Plano, Texas, the privately held company is backed by Vista Equity Partners.