Senior Analyst, SIEM & Automation, Information Security

Edwards Lifesciences Gruppe; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Edwards Lifesciences is expanding its IT Innovation Hub in Pune, India. As Senior Analyst for Information Security, you will lead SIEM engineering, manage data pipelines, and build automation use cases to protect Edwards applications and products.

The role requires expertise with SIEM tools (Splunk, QRadar), data ingestion, parsers, SOAR, and scripting for automation, delivering secure, scalable solutions across cloud and on-prem environments.

Qualifications

• Bachelor's Degree in related field with 5+ years of experience or equivalent.
• Hands-on experience with SIEM management and data pipelines.
• Proficiency in parsers/normalization and SOAR platforms.

Responsibilities

• Lead SIEM engineering: deploy, configure, and optimize the SIEM platform for logs and data availability.
• Own the SIEM data layer: ingestion, parsing, normalization, and modeling.
• Design and maintain log ingestion pipelines from cloud, on-prem, and SaaS sources.
• Write and tune field extraction rules and parsers (regex, Grok, CEF/LEEF, OCSF, ECS).
• Onboard new data sources end-to-end: configuration, mapping, validation.
• Collaborate with detection engineers to ensure data quality for use cases.
• Manage log volume and data routing policies.
• Develop automation use cases and AI-Agents in IR, IAM, Cloud, and security operations.
• Improve security data pipelines with innovative automations.
• Stay informed on threat landscape to drive SIEM improvements.

Skills

SIEM engineering

Data pipelines

Automation

SOAR platforms

Parsers

Regex/Grok

Data onboarding

Python scripting

Log analysis

Education

Bachelor's degree or equivalent

Tools

Splunk

QRadar

Cribl

bindPlane

databahn

Torq

Palo Alto XSOAR

rsyslog

syslog-ng

Fluentd/Fluent Bit

NXLog

Job description

Edwards Lifesciences is expanding its global technology capabilities with the launch of a new IT Innovation Hub in Pune, India. The Hub strengthens the technology foundation that supports our business worldwide, working in close partnership with teams across regions to deliver reliable, high-quality solutions at scale. Designed as a long-term investment, the Pune Hub will advance newer digital capabilities such as automation, data, AI, and cloud, and will include roles spanning end user services, application development, and enterprise platform teams. Together, these teams will help Edwards operate more efficiently and accelerate innovation in support of our mission of advancing patient care. As an Edwards Sr. Analyst for Information Security, you will contribute with protecting Edwards organization, applications, and products by leading SIEM engineering, managing data pipelines and building automation use cases. Ideal candidates possess knowledge in data source onboarding, writing parsers and SOAR operations. If you have an innovative mindset and a strong desire to address security challenges through scalable automation and SIEM engineering - this role is for you.

How will you make an impact:

• Lead SIEM engineering: deploy, configure, and continuously optimize the SIEM platform for performance, scalability, and reliable data availability
• Own the SIEM data layer - ingestion, parsing, normalization, and data modeling - ensuring logs are complete, well-structured, and queryable across the platform
• Design, build, and maintain log ingestion pipelines from cloud, on-prem, and SaaS sources into the SIEM platform
• Write and tune field extraction rules, parsers, and normalization logic (regex, Grok, CEF/LEEF, OCSF, ECS)
• Onboard new data sources end-to-end: connector configuration, schema mapping, field normalization, and data validation
• Partner with detection engineers to ensure data quality and completeness for use-case coverage
• Manage log volume for cost optimization, and data routing policies (tiering, filtering, sampling)
• Design, build and maintain complexed automation use cases and AI-Agents in Incident Response, IAM, Cloud and Security operations areas
• Improve security data pipelines by building innovative automations
• Staying informed on the evolving cybersecurity threat landscape to drive innovative SIEM processes and automations to drive Edwards' security posture

What you'll need (Required):

• Bachelor's Degree in related field with 5+ years of previous related experience, or equivalent work experience based on Edwards criteria

What else we look for:

• Previous related experience in SIEM management
• Expert with Google SecOps or other SIEM solutions (Splunk, Qradar etc)
• Expert with security Data Pipeline solutions (Cribl, bindplane, databahn etc)
• Preffered Experience with SOAR platforms operations (Torq, PaloAlto XSOAR etc)
• Experience with parser creation and data formatting (regex, Grok, CEF/LEEF, OCSF, ECS)
• Ability to evaluate, prioritize and integrate new data sources (OT/ICS, API telemetry)
• Expirence with log forwarding technologies (rsyslog, syslog-ng, Fluentd/Fluent Bit, NXLog etc)
• Certifications in related discipline preferred (e.g., CEH, CISM, CISSP)
• Understanding of security concepts in any of the following: IDR, Cloud, IAM and security operations
• Scripting proficiency: Python or Bash for automation and parser development - Preffered
• Proficient analytical and problem-solving abilities to identify and mitigate potential security risks
• Strict attention to detail
• Ability to partner with other information security and IT experts
• Substantial understanding of troubleshooting techniques with the ability to adapt and learn new technologies
• Ability to provide guidance to assigned teams on implementing information security solutions
• Excellent organization and time management skills
• Excellent verbal and written communication skills

Edwards Lifesciences is the leading global structural heart innovation company, driven by a passion to improve patient lives. Through breakthrough technologies, world-class evidence and partnerships with clinicians and healthcare stakeholders, our employees are inspired by our patient-focused culture to deliver life-changing innovations to those who need them most.