L3 SOC, SIEM Tools Expert _Gurgaon_Onsite

NTT DATA, Inc.; Gurugram District; On-site; INR 3,000,000 - 5,400,000; Full time

Job summary

NTT DATA, Inc. is seeking an experienced SIEM Implementation Specialist to design, deploy, and optimize enterprise SIEM architectures, overseeing deployment, configuration, and integration across log sources.

The role focuses on SIEM engineering, UEBA capabilities, and automated playbooks to enhance threat detection and visibility within complex IT environments. Collaboration with security and infrastructure teams is essential to deliver robust security outcomes.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 8+ years of SIEM engineering, implementation, and security analytics.
• Hands-on SIEM architecture, deployment, configuration.

Responsibilities

• Design, deploy, and manage SIEM solutions.
• Develop and optimize security use cases, correlation rules, and detection content.
• Integrate and onboard log sources across enterprise environments.
• Implement and manage UEBA capabilities.
• Create and maintain automated response playbooks.
• Collaborate with security and infrastructure teams to enhance threat detection and visibility.

Skills

SIEM architecture

SIEM deployment

SIEM configuration

Use-case development

Rule tuning

UEBA implementation

Log onboarding

Log parsing

Log normalization

Log integration

Playbooks automation

Threat detection

Event correlation

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Splunk

IBM QRadar

ArcSight

Job description

Job Title: SIEM Implementation Specialist

Job Summary

Seeking an experienced SIEM Implementation Specialist with strong hands-on expertise in SIEM architecture, deployment, configuration, integration, and optimization. The role focuses on SIEM engineering and implementation rather than SOC monitoring and operations.

Mandatory Skills

• Hands-on experience in SIEM architecture, deployment, and configuration.
• Expertise in SIEM use-case development and tuning.
• Experience with UEBA (User & Entity Behavior Analytics) implementation and management.
• Strong knowledge of log source onboarding, parsing, normalization, and integration.
• Hands-on experience in Playbook creation and automation.
• Experience managing and optimizing enterprise SIEM platforms.
• Strong understanding of cybersecurity frameworks, log management, and event correlation.

Key Responsibilities

• Design, deploy, and manage SIEM solutions.
• Develop and optimize security use cases, correlation rules, and detection content.
• Integrate and onboard multiple log sources across enterprise environments.
• Implement and manage UEBA capabilities.
• Create and maintain automated response playbooks.
• Collaborate with security and infrastructure teams to enhance threat detection and visibility.

Preferred Certifications

• Splunk Certified Architect / Enterprise Security Certified Admin
• Microsoft SC-200 (Security Operations Analyst)
• IBM QRadar Certified Associate Administrator
• ArcSight ESM Certification
• GIAC (GCIA/GCIH) or relevant SIEM certifications

Experience & Qualification

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 8+ years of experience in SIEM Engineering, Implementation, and Security Analytics.

Must-Have Skills

SIEM Architecture & Deployment

Security Analytics & Event Correlation