SIEM Engineer II
Securonix, Inc.1 year ago
Remote, WorldwideMid Level
Responsibilities
- Lead end-to-end SIEM implementations and integrations in customer environments.
- Gather customer requirements and develop tailored security monitoring use cases based on industry threat landscapes.
- Coordinate deployment of collectors and agents for on-premises data collection and forwarding.
- Design and implement secure data flows into the Securonix cloud using industry best practices.
- Develop content, use cases, data models, dashboards, and connectors for custom requirements.
- Troubleshoot end-to-end network and infrastructure issues during data onboarding.
- Deploy and integrate Securonix SOAR with customer infrastructure for response orchestration.
- Coordinate with service delivery, management, engineering, maintenance, and operational support teams.
- Engage customers and internal product teams to gather requirements and recommend product improvements.
- Train and enable customers and partners for successful platform adoption.
Requirements
- At least 4 years of experience in information security and SIEM.
- Strong understanding of SIEM solutions including Splunk, QRadar, ArcSight, LogRhythm, and Exabeam.
- Experience deploying SIEM solutions across multiple customers.
- Understanding of MITRE ATT&CK, kill chains, and other attack models.
- Strong communication and customer-facing experience.
- Knowledge of scripting languages such as Python and PowerShell.
- Preferred bachelor’s degree in Computer Science, Information Systems, or Cybersecurity.
- Preferred 3–4+ years of experience deploying UEBA.
- Working knowledge of machine learning in cybersecurity and cloud technologies such as Amazon, Azure, and Google.
- Understanding of log collection and aggregation technologies including Syslog-NG, syslog, NXLog, and Windows Event Forwarding.
- Understanding of the Hadoop ecosystem and Apache technologies.
- Experience integrating endpoint security and host-based intrusion detection solutions.
- Experience with network forensics tools such as Wireshark, PCAP, and tcpdump.
- Industry certifications such as CISSP or CISM are relevant qualifications.
Benefits
- Health insurance covering the employee, spouse, children, and dependent parents or parents-in-law, with a total insured sum of INR 7,50,000.
- Personal accident insurance with a total insured sum of INR 10,00,000.
- Term life insurance covering five times the employee’s fixed base pay.
- Full-time employee benefits are provided by Securonix.