L2 SOC Security Engineer (SIEM / SOAR / UEBA) 3 to 4 Years

Black Box; Gurugram District; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Black Box in India is seeking a SOC Engineer to deploy, configure, and optimize SIEM, SOAR, and UEBA platforms, onboard log sources, and develop correlation rules and playbooks. You will investigate incidents, perform threat hunting, and ensure platform health.

The role involves building parsers, APIs, and automation workflows to improve SOC efficiency. You will fine-tune detections and risk scoring, support compliance, assist with audits, and provide guidance to L1 analysts.

Responsibilities

• Deploy, configure, administer, and optimize SIEM, SOAR, and UEBA platforms.
• Onboard log sources, security tools, identity sources, and business applications into the security ecosystem.
• Develop and maintain correlation rules, behavioral analytics, dashboards, reports, automation playbooks, and custom integrations.
• Investigate complex security incidents, perform threat hunting, and conduct root cause analysis.
• Develop and optimize parsers, connectors, APIs, and automation workflows to improve SOC efficiency.
• Fine-tune detection rules, behavioral models, and risk scoring to minimize false positives.
• Ensure platform availability, performance optimization, upgrades, backup, and overall system health.
• Support compliance, audit requirements, use case development, documentation, and provide technical guidance to L1 analysts.

Job description

• Deploy, configure, administer, and optimize SIEM, SOAR, and UEBA platforms.
• Onboard log sources, security tools, identity sources, and business applications into the security ecosystem.
• Develop and maintain correlation rules, behavioral analytics, dashboards, reports, automation playbooks, and custom integrations.
• Investigate complex security incidents, perform threat hunting, and conduct root cause analysis.
• Develop and optimize parsers, connectors, APIs, and automation workflows to improve SOC efficiency.
• Fine-tune detection rules, behavioral models, and risk scoring to minimize false positives.
• Ensure platform availability, performance optimization, upgrades, backup, and overall system health.
• Support compliance, audit requirements, use case development, documentation, and provide technical guidance to L1 analysts.