Cybersecurity Admin Sec - SIEM Administrator

Tata Consultancy Services; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services is seeking a Cybersecurity Admin Sec - SIEM Administrator to drive proactive threat hunting and security monitoring in a complex environment. The role requires 8–12 years of experience and hands-on work with SIEM, EDR, NDR, and XDR platforms.

You will map attacker techniques to MITRE ATT&CK, analyze security events, and collaborate with SOC, IR, and engineering teams. Strong scripting and automation skills are preferred.

Qualifications

• 8–12 years of experience in cybersecurity or threat hunting.
• Proficient in proactive threat hunting across endpoints, networks, and cloud.
• Skilled at mapping adversaries to MITRE ATT&CK and presenting findings.

Responsibilities

• Conduct proactive threat hunting across endpoints, networks, cloud, and identity platforms; develop hypotheses from threat intel.
• Identify IoCs/IoAs and suspicious behaviors; detect stealthy, persistent threats; operationalize threat intel feeds.
• Map TTPs to MITRE ATT&CK; track threats, vulnerabilities, and campaigns; document findings and remediation suggestions; present to leadership.

Skills

Threat hunting

SIEM administration

MITRE ATT&CK mapping

Threat intelligence

Automation scripting

SOC collaboration

Threat detection optimization

Tools

SIEM platforms

EDR

NDR

XDR

Job description

Role: Cybersecurity Admin Sec - SIEM Administrator

Experience: 8 to 12

SN

Responsibility of / Expectations from the Role

1

• Conduct proactive threat hunting activities across endpoints, networks, cloud environments, and identity platforms. - Develop and execute threat hunting hypotheses based on threat intelligence, emerging attack trends, and organizational risks.
• Identify Indicators of Compromise (IoCs), Indicators of Attack (IoAs), and suspicious behaviors.

2

• Analyze security events to detect stealthy, persistent, and advanced threats.
• Consume and operationalize cyber threat intelligence feeds.

3

• Map adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework.
• Track emerging threats, vulnerabilities, and attack campaigns.
• Document hunting findings, attack patterns, and remediation recommendations.
• Present threat hunt outcomes to security leadership and stakeholders.

4

• Collaborate with SOC, Incident Response, Vulnerability Management, Red Team, and Security Engineering teams.
• Develop scripts and automation to improve threat hunting and investigation efficiency.

5

• Continuously evaluate and improve security monitoring and detection coverage.
• Contribute to purple team exercises and detection validation activities.

6

• Enhance threat detection capabilities within SIEM, EDR, NDR, and XDR platforms.

7

8

• Support incident response activities for malware infections, ransomware, insider threats, credential compromise, and APT attacks.