Cyber Security Analyst

Etenico Technologies; Maharashtra; Sur place; INR 900 000 - 1 500 000; Plein temps

Résumé du poste

Etenico Technologies is seeking an experienced CrowdStrike Next-Gen SIEM Administrator to manage CrowdStrike Falcon Next-Gen SIEM/LogScale, onboard logs, configure parsers, and tune detections. You will work with SOC, IR, Threat Hunting to enhance alert quality and incident response.

The role includes integrating diverse log sources, building dashboards, and maintaining documentation, focusing on Windows/Linux, cloud, identity, and security data; familiarity with SOAR tools is a plus.

Qualifications

• Strong hands-on experience with CrowdStrike Falcon Next-Gen SIEM / LogScale.
• Good knowledge of SIEM administration, architecture, and log management.
• Experience with log onboarding, parsing, normalization, data connectors, and troubleshooting.
• Hands-on experience developing queries, dashboards, alerts, correlation rules, and detections.
• Understanding of Windows, Linux, network, cloud, identity, endpoint, and security logs.
• Good understanding of SOC operations, Detection Engineering, Incident Response, and Threat Hunting.
• Knowledge of MITRE ATT&CK and attacker TTPs.
• Experience with APIs, JSON, Regex, and scripting such as Python, PowerShell, or Bash.
• Exposure to other SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic will be an advantage.

Responsabilités

• Administer and manage CrowdStrike Falcon Next-Gen SIEM / LogScale.
• Configure and onboard security log sources, connectors, and telemetry.
• Develop and maintain parsers, queries, dashboards, alerts, and detection rules.
• Troubleshoot log ingestion, parsing, normalization, connectivity, and data-quality issues.
• Build and tune detection rules and security use cases to improve alert quality.
• Integrate endpoint, network, identity, cloud, and security-tool logs into the SIEM.
• Support CrowdStrike Falcon telemetry integration and security monitoring.
• Manage user access, roles, permissions, and platform configurations.
• Work with SOC, Incident Response, Threat Hunting, Cloud, and Security Engineering teams.
• Support automation and integration with SOAR and other security platforms.
• Maintain technical documentation, operational procedures, and SIEM configurations.

Connaissances

CrowdStrike Falcon Next-Gen SIEM

LogScale

SIEM administration

Log onboarding

Queries and dashboards

Python/PowerShell/Bash

Regex

APIs

Outils

CrowdStrike Falcon Next-Gen SIEM

LogScale

Splunk

Microsoft Sentinel

QRadar

Elastic

Description du poste

We are looking for an experienced CrowdStrike Next-Gen SIEM Administrator with strong hands‑on expertise in managing, configuring, and supporting CrowdStrike Falcon Next‑Gen SIEM environments. The role will focus on SIEM administration, log onboarding, integrations, detection configuration, troubleshooting, and supporting Security Operations teams.

CrowdStrike’s current platform supports custom parsers, third‑party log ingestion, correlation/custom detections, and Fusion SOAR workflow automation. [developer....strike.com]

Key Responsibilities

• Administer and manage CrowdStrike Falcon Next-Gen SIEM / LogScale.
• Configure and onboard security log sources, connectors, and telemetry.
• Develop and maintain parsers, queries, dashboards, alerts, and detection rules.
• Troubleshoot log ingestion, parsing, normalization, connectivity, and data-quality issues.
• Build and tune detection rules and security use cases to improve alert quality.
• Integrate endpoint, network, identity, cloud, and security-tool logs into the SIEM.
• Support CrowdStrike Falcon telemetry integration and security monitoring.
• Manage user access, roles, permissions, and platform configurations.
• Work with SOC, Incident Response, Threat Hunting, Cloud, and Security Engineering teams.
• Support automation and integration with SOAR and other security platforms.
• Maintain technical documentation, operational procedures, and SIEM configurations.

Required Skills

• Strong hands‑on experience with CrowdStrike Falcon Next‑Gen SIEM / LogScale.
• Good knowledge of SIEM administration, architecture, and log management.
• Experience with log onboarding, parsing, normalization, data connectors, and troubleshooting.
• Hands‑on experience developing queries, dashboards, alerts, correlation rules, and detections.
• Understanding of Windows, Linux, network, cloud, identity, endpoint, and security logs.
• Good understanding of SOC operations, Detection Engineering, Incident Response, and Threat Hunting.
• Knowledge of MITRE ATT&CK and attacker TTPs.
• Experience with APIs, JSON, Regex, and scripting such as Python, PowerShell, or Bash.
• Exposure to other SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic will be an advantage.