Security Engineer

Saint-Gobain India Private Limited; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Saint-Gobain India Private Limited is looking for an expert to manage and enhance SIEM/SOAR systems in Mumbai. The role involves developing automation scripts, overseeing platform administration, and collaborating with security teams to refine incident response strategies.

Candidates should be proficient in improving threat detection and incident response processes, while maintaining documentation and managing reports for CyberSOC KPIs. This position plays a vital role in strengthening the organization's cybersecurity posture.

Responsibilities

• Evaluate and enhance the performance of SIEM/SOAR systems.
• Develop and maintain automation scripts and playbooks.
• Oversee day-to-day administration of SIEM/SOAR platforms.
• Collaborate with the Incident Response team for integration.
• Work with IT and security teams to enhance security posture.
• Maintain documentation of automation and scripts.

Job description

Key Responsibilities

• Evaluate and enhance the performance of SIEM/SOAR systems to ensure optimal threat detection and incident response.
• Develop and maintain automation scripts and playbooks to streamline incident detection, analysis, and response processes. Leverage SOAR capabilities to reduce manual intervention and improve response times.
• Oversee the day-to-day administration of SIEM/SOAR platforms, ensuring their availability, reliability, and security. Perform regular updates, patches, and configuration changes.
• Collaborate with the Incident Response team to ensure seamless integration of detection and response functions. Provide support during security incidents to ensure timely and effective remediation.
• Work closely with other IT and security teams to develop specific use cases and to enhance the overall security posture of the organization. Share insights and recommendations to improve overall cybersecurity posture.
• Maintain detailed documentation of automation, scripts, and improvement.
• Manage execution of standard procedures for the administration, content management, change management, version/patch management, and lifecycle management of the SIEM/SOAR platforms.
• Manage technical documentation around the content deployed to the SIEM/SOAR.
• Manage reports, dashboards, metrics for CyberSOC KPIs and presentation to senior management & other stakeholders.