Security Engineer

Kiya.ai; Hyderabad; Hybrid; INR 900,000 - 1,500,000; Full time

Job summary

Kiya.ai is seeking a SIEM Engineer to manage and optimize the SIEM stack in Hyderabad. You will configure and troubleshoot the platform, onboard various log sources, and ensure data is parsed, normalized, and readily searchable.

You will build data flows, write detection queries, map rules to MITRE ATT&CK techniques, and maintain dashboards for health and coverage. The role also covers cost optimization, automation, and mentoring junior engineers.

Responsibilities

• SIEM architecture and administration
• Configure, maintain and troubleshoot the SIEM platform
• Log source onboarding
• Parse and normalize logs
• Build data flows for logs (filter, enrich, transform, route)
• Write queries and alerts to identify suspicious activity
• MITRE ATT&CK mapping: align rules to attacker techniques
• Dashboards and monitoring: track ingestion, health, coverage
• Ingestion and cost optimization: reduce unnecessary data
• Automation and integrations: connect alerts to incident tools
• Troubleshooting and escalation across sources, pipelines and networks
• Documentation and mentoring: SOPs and guide junior engineers

Job description

JD responsibility

What it means in practical terms

SIEM architecture and administration

Configure, maintain and troubleshoot the SIEM platform.

Log source onboarding

Connect Windows, Linux, firewalls, VPNs, cloud systems, databases and applications to the platform.

Parsing and normalization

Convert different log formats into consistent, searchable fields.

Falcon Onum pipelines

Build data flows that filter, enrich, transform and route logs.

CQL detection rules

Write queries and alerts to identify suspicious security activity.

MITRE ATT&CK mapping

Map detection rules to known attacker tactics and techniques.

Dashboards and monitoring

Track log ingestion, pipeline failures, platform health and detection coverage.

Ingestion and cost optimization

Reduce unnecessary data ingestion and manage storage and licensing consumption.

Automation and integrations

Connect alerts to incident-management tools and automate response workflows.

Troubleshooting and escalation

Resolve complex failures across log sources, collectors, pipelines, networks and SIEM.

Documentation and mentoring

Prepare SOPs, document integrations and guide junior engineers.