Senior Information Security Tech Consultant-I

Lumen Technologies India; Dadri; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

Lumen Technologies India in Dadri, UP seeks an experienced Flex XSIAM/EDR/Automation Engineer to support CrowdStrike Falcon and XSIAM operations, onboarding, and automation development. You will tune alerts, validate telemetry, and drive cross‑platform integrations across CrowdStrike, XSIAM, Sentinel, and ServiceNow.

Ideal candidates have 7–12 years of hands-on security experience, familiarity with multiple SIEM/XDR tools, scripting ability, and strong collaboration with SOC teams.

Qualifications

• 7–12 years in security operations, EDR admin, SIEM engineering, or automation.
• Experience with CrowdStrike Falcon or similar EDR platforms.
• Familiarity with Cortex XSIAM, MS Sentinel, Splunk, QRadar, or similar SIEM/XDR.
• Basic scripting with Python, PowerShell, Bash, or similar.
• Familiarity with REST APIs, JSON, endpoint telemetry, and detection workflows.
• Strong troubleshooting, documentation, and cross‑functional communication.

Responsibilities

• Administer and support CrowdStrike Falcon environments, including sensor health, policy review, alert tuning, and ops support.
• Assist with EDR onboarding, telemetry validation, prevention policy review, and detection visibility.
• Support Cortex XSIAM data source onboarding, parsing validation, dashboards, and alert tuning.
• Develop and maintain automation workflows for enrichment, alert routing, reporting, and incident support.
• Collaborate with SOC, SIEM, EDR, automation, IT, and customer teams to meet AMDR platform needs.
• Assist analysts with investigations, alert validation, and escalation support.
• Validate data quality, telemetry coverage, and integration health across EDR and SIEM/XDR platforms.
• Maintain documentation, procedures, data dictionaries, and handoff materials.

Skills

Security operations

EDR administration

SIEM engineering

Automation development

CrowdStrike Falcon

Troubleshooting

Tools

CrowdStrike Falcon

REST APIs

JSON

Job description

Summary

The Flex XSIAM / EDR / Automation Engineer is responsible for supporting multiple security engineering functions across Cortex XSIAM, endpoint detection and response platforms, and SOC automation workflows. This role provides flexible engineering support for customer onboarding, platform operations, EDR tuning, telemetry validation, detection support, and automation development. The role has a specific focus on CrowdStrike Falcon while also supporting XSIAM and broader AMDR automation needs.

Key Responsibilities

• Administer and support CrowdStrike Falcon environments, including sensor health, policy review, alert tuning, and operational support.
• Support EDR onboarding, endpoint telemetry validation, prevention policy review, and detection visibility.
• Assist with Cortex XSIAM data source onboarding, parsing validation, dashboard creation, and alert tuning.
• Support integrations between CrowdStrike, XSIAM, Sentinel, ServiceNow, and other security platforms.
• Develop and maintain automation workflows for enrichment, alert routing, reporting, and incident support.
• Assist SOC analysts with complex endpoint investigations, alert validation, and escalation support.
• Validate data quality, telemetry coverage, and integration health across EDR and SIEM/XDR platforms.
• Support customer onboarding, proof-of-value activities, technical validation, and platform readiness.
• Maintain documentation, operational procedures, data dictionaries, and handoff materials.
• Collaborate with SOC, SIEM, EDR, automation, IT, and customer teams to support evolving AMDR platform needs.

Required Qualifications

• 7-12 years of hands‑on experience in security operations, EDR administration, SIEM engineering, or automation.
• Experience with CrowdStrike Falcon or another EDR platform such as Microsoft Defender, SentinelOne, Carbon Black, or Cortex XDR.
• Familiarity with Cortex XSIAM, Microsoft Sentinel, Splunk, QRadar, or similar SIEM/XDR platforms.
• Basic scripting skills using Python, PowerShell, Bash, or similar.
• Familiarity with REST APIs, JSON, log formats, endpoint telemetry, and detection workflows.
• Strong troubleshooting, investigation, documentation, and cross‑functional communication skills.

Preferred Certifications

• CrowdStrike Falcon Administrator
• CrowdStrike Falcon Responder
• Microsoft SC-200 Security Operations Analyst
• Palo Alto Cortex XSIAM or Cortex XDR certification
• CompTIA Security+ We are an equal opportunity employer committed to fair and ethical hiring practices. We do not charge any fees or accept any payment from candidates at any stage of the recruitment process.

SIEM, Infosec