Senior CrowdStrike SIEM Administrator

Persistent-Systems; Bengaluru; Híbrido; INR 4.000.000 - 7.000.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work hours

Flexible work arrangements

Long Service awards

Insurance coverage

Descripción de la vacante

Persistent Systems Limited seeks a Senior CrowdStrike SIEM Administrator to manage enterprise security monitoring and log management using CrowdStrike and SIEM platforms. The role partners with SOC, IR, Threat Hunting, and Infrastructure teams to enhance visibility and threat detection.

The ideal candidate will ingress data reliably, develop dashboards, and optimize detection rules, while collaborating with security engineers to strengthen cyber defense capabilities.

Formación

• 8-12 years of experience in SIEM Administration, Security Operations, Security Engineering, Cybersecurity Monitoring, or Threat Detection.
• Strong hands-on experience administering CrowdStrike Falcon and enterprise SIEM or log management platforms.
• Expertise in security monitoring, log collection, event correlation, detection engineering, and operational analytics.
• Strong experience creating and tuning detection rules, dashboards, reports, alerts, and threat-hunting queries.
• Knowledge of endpoint telemetry, EDR, threat intelligence, and security event management processes.
• Experience with Windows/Linux/AD/firewalls/IDS-IPS and cloud services.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, and detection engineering best practices.
• Familiarity with ITSM platforms (e.g., ServiceNow) and cloud security monitoring.

Responsabilidades

• Administer, configure, and optimize CrowdStrike Falcon and related SIEM platforms for enterprise security monitoring.
• Configure data ingestion pipelines, log collectors, parsers, connectors, dashboards, retention policies, and access controls.
• Monitor platform health, ingestion performance, storage utilization, licensing, and reliability.
• Develop and tune detection rules, correlation logic, alerts, dashboards, and use cases.
• Build search queries, investigations, reports, and operational analytics for SOC and IR.
• Troubleshoot ingestion issues, log source failures, and data quality concerns.
• Integrate CrowdStrike with endpoints, cloud platforms, identity solutions, and ITSM tools.
• Support incident investigations with log analysis and forensic support.
• Manage platform upgrades, patches, and maintenance.
• Develop runbooks and platform documentation.

Conocimientos

SIEM Administration

Security Operations

Threat Detection

Detection Engineering

Operational Analytics

Educación

Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering

Herramientas

CrowdStrike Falcon

Enterprise SIEM

Log Management

Descripción del empleo

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 18 of the Fortune 50 companies, 7 of the 10 top US banks, 9 of the 10 technology companies, and numerous innovators across the healthcare ecosystem.

Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 26 sequential quarters of growth with $487.6M in Q4 FY26 revenue, up 7.8% Q-o-Q and 20.0% Y-o-Y. Our 29,500+global team members, located in 21 countries, have been instrumental in helping the market leaders transform their industries. We received five awards at the ISG (Information Services Group) Provider Lens™ Awards 2026 and, for the second year in a row, were awarded the Growth Honor of the Year at the Everest Group Elevate 2026.

AboutPosition:

We are seeking an experienced Senior CrowdStrike SIEM Administrator to manage, optimize, and support enterprise security monitoring and log management capabilities using CrowdStrike and SIEM platforms. This role is responsible for ensuring reliable data ingestion, log collection, detection engineering, search optimization, dashboard development, and operational support across security environments. The ideal candidate will partner with SOC, Incident Response, Threat Hunting, Infrastructure, and Security Engineering teams to enhance visibility, improve threat detection, and strengthen the organization's cyber defense capabilities.

• Role: Senior CrowdStrike SIEM Administrator
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

WhatYou'llDo:

• Administer, configure, and optimize CrowdStrike Falcon and associated SIEM platforms to support enterprise security monitoring requirements.
• Configure and maintain data ingestion pipelines, log collectors, parsers, connectors, dashboards, retention policies, and access controls.
• Monitor platform health, ingestion performance, connector status, storage utilization, licensing consumption, and overall system reliability.
• Develop, enhance, and tune detection rules, correlation logic, alerts, dashboards, and security monitoring use cases.
• Build and optimize search queries, investigations, reports, and operational analytics to support SOC and incident response functions.
• Troubleshoot data ingestion issues, log source failures, connector problems, parser errors, and data quality concerns.
• Integrate CrowdStrike with endpoint security, cloud platforms, identity solutions, vulnerability management, threat intelligence, and ITSM tools.
• Support incident investigations by providing log analysis, event correlation, telemetry review, and forensic support.
• Manage platform upgrades, configuration changes, patches, and maintenance activities.
• Develop operational runbooks, platform documentation, troubleshooting guides, and knowledge management resources.
• Support audit requirements, governance activities, and compliance reporting initiatives.
• Collaborate with SOC analysts, threat hunters, incident responders, and security engineers to continuously improve detection coverage and operational effectiveness.

ExpertiseYou'llBring:

• 8-12 years of experience in SIEM Administration, Security Operations, Security Engineering, Cybersecurity Monitoring, or Threat Detection.
• Strong hands-on experience administering CrowdStrike Falcon and enterprise SIEM or log management platforms.
• Expertise in security monitoring, log collection, event correlation, detection engineering, and operational analytics.
• Strong experience creating and tuning detection rules, dashboards, reports, alerts, and threat-hunting queries.
• Knowledge of endpoint telemetry, endpoint detection and response (EDR), threat intelligence, and security event management processes.
• Experience working with common log sources including Windows, Linux, Active Directory, firewalls, IDS/IPS, cloud services, databases, web applications, and network devices.
• Strong understanding of incident response workflows, security operations processes, and cyber threat detection methodologies.
• Experience with APIs, automation, scripting, and platform integrations using Python, PowerShell, REST APIs, or similar technologies.
• Familiarity with ITSM platforms such as ServiceNow and integration with security operations workflows.
• Understanding of MITRE ATT&CK, Cyber Kill Chain, threat hunting methodologies, and detection engineering best practices.
• Experience supporting cloud security monitoring across Azure, AWS, or Google Cloud environments.
• Strong troubleshooting, analytical, and problem-solving capabilities in complex enterprise environments.
• Excellent communication, stakeholder management, and technical documentation skills.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline.
• CrowdStrike Falcon certifications, Splunk certifications, Microsoft Security certifications, GIAC, GCIH, GCFA, Security+, or equivalent cybersecurity certifications are advantageous.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."