SIEM Engineer II
Securonix, Inc.over 1 year ago
Remote, IndiaMid Level
Responsibilities
- Lead end-to-end SIEM implementations and integrations in customer environments.
- Gather customer requirements and develop tailored security monitoring use cases based on industry threat landscapes.
- Coordinate deployment of collectors and agents for on-premises data collection and forwarding.
- Design and implement secure data flows into the Securonix cloud using industry best practices.
- Develop content, use cases, data models, dashboards, and connectors for custom requirements.
- Troubleshoot end-to-end network and infrastructure issues during data onboarding.
- Deploy and integrate Securonix SOAR with customer infrastructure for response orchestration.
- Coordinate with service delivery, management, engineering, maintenance, and operational support teams.
- Engage customers and internal product teams to gather requirements and recommend product improvements.
- Train and enable customers and partners for successful platform adoption.
Requirements
- At least 4 years of experience in information security and SIEM.
- Strong understanding of SIEM solutions including Splunk, QRadar, ArcSight, LogRhythm, and Exabeam.
- Experience deploying SIEM solutions across multiple customers.
- Understanding of MITRE ATT&CK, kill chains, and other attack models.
- Strong communication and customer-facing experience.
- Knowledge of scripting languages such as Python and PowerShell.
- Preferred bachelor’s degree in Computer Science, Information Systems, or Cybersecurity.
- Preferred 3–4+ years of experience deploying UEBA.
- Working knowledge of machine learning in cybersecurity and cloud technologies such as Amazon, Azure, and Google.
- Understanding of log collection and aggregation technologies including Syslog-NG, syslog, NXLog, and Windows Event Forwarding.
- Understanding of the Hadoop ecosystem and Apache technologies.
- Experience integrating endpoint security and host-based intrusion detection solutions.
- Experience with network forensics tools such as Wireshark, PCAP, and tcpdump.
- Industry certifications such as CISSP or CISM are relevant qualifications.
Benefits
- Health insurance covering the employee, spouse, children, and dependent parents or parents-in-law, with a total insured sum of INR 7,50,000.
- Personal accident insurance with a total insured sum of INR 10,00,000.
- Term life insurance covering five times the employee’s fixed base pay.
- Full-time employee benefits are provided by Securonix.
About Securonix, Inc.
Securonix builds a cloud-native security operations platform that unifies SIEM, UEBA, SOAR, threat intelligence, and TDIR for enterprise security teams. Its subscription software runs on AWS/Snowflake and is used by global enterprises and managed security service providers to detect, investigate, and respond to threats. Founded in 2008 and headquartered in Plano, Texas, the privately held company is backed by Vista Equity Partners.