L3 Engineer

Happiest Minds Technologies; Bengaluru; On-site; INR 1,200,000 - 2,500,000; Full time

Job summary

Happiest Minds Technologies in Bengaluru seeks an experienced SOC L3 professional with strong Elastic SIEM and SOAR expertise to lead security operations. The candidate will drive SIEM implementation, content engineering and incident response across diverse platforms.

We value hands-on experience with Elastic Security, familiarity with cloud security, and scripting skills to automate detection and response.

Qualifications

• Hands-on SIEM implementation and administration experience.
• Experience with multiple SIEM platforms.
• Strong knowledge of Windows, Linux, AD, cloud security.
• Proficient in scripting for automation (Python/PowerShell/Bash).

Responsibilities

• Design, implement and optimize SOC operations across SIEM tools.
• Lead threat hunting, incident response and content engineering.
• Develop automation and detection engineering for SOC workflows.

Skills

Elastic SIEM

SOAR

Threat hunting

Incident response

SOC optimization

Windows

Linux

Azure

AWS

Python scripting

PowerShell

Bash

MITRE ATT&CK

IOC analysis

Threat intelligence

Tools

Elastic Defend

Kibana

Elasticsearch

Logstash

Beats

Fleet

Microsoft Sentinel

QRadar

Splunk

FortiSIEM

ArcSight

Sumo Logic

Job description

SOC L3 Engineer (Elastic SIEM & SOAR)

Exp: 5-12 YRS

Location : Bangalore

Role: Permanent

Comfortable to work on 24/7 shift timings.

Role Summary

Seeking an experienced SOC L3 professional with strong expertise in Elastic Security (SIEM) and SOAR platforms. The candidate should possess hands‑on experience in SIEM implementation, administration, content engineering, threat hunting, incident response, and SOC optimization across multiple SIEM technologies such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, or similar platforms.

Required Skills:

• Strong hands‑on experience with Elastic SIEM / Elastic Security.
• Experience with Elastic Defend, Kibana, Elasticsearch, Logstash, Beats, Fleet, and detection engineering.
• Hands‑on experience in SOAR implementation and automation orchestration.
• Experience implementing or managing other SIEM platforms such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, Stellar Cyber, or equivalent.
• Strong understanding of Windows, Linux, Active Directory, Azure, AWS, networking, and cloud security.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat intelligence.
• Experience with scripting (Python, PowerShell, Bash) for automation.
• Understanding of EDR/XDR, NDR, Email Security, IAM, and Security Controls integration