Senior Security Analyst

Staples India; Chennai District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A leading cybersecurity company in Chennai is seeking an experienced professional to engineer and maintain SIEM ingestion pipelines. You will develop detection rules and monitor telemetry metrics, ensuring seamless operation across various sources. Ideal candidates will have 4-6 years of experience, proficiency in cybersecurity standards, and the ability to mentor junior analysts in SIEM practices. This role offers opportunities for career growth in a dynamic environment.

Qualifications

• 4-6 years of experience in cybersecurity.
• Proficient in SIEM query languages (KQL/SPL).
• Experience with data connectors, parsers, normalization, and enrichment.

Responsibilities

• Engineer and maintain SIEM ingestion pipelines across various telemetry sources.
• Develop queries, dashboards, and data models for investigations.
• Mentor junior analysts on logging best practices.

Skills

Cybersecurity frameworks and standards

SIEM tools

Intrusion detection systems

Education

Master’s degree in Cybersecurity or related field

Job description

Staples India Business Innovation Hub Private Limited | Permanent

• Date Opened 12/29/2025
• Job Type Permanent
• Work Experience 4-6 years
• State/Province Tamil Nadu
• Country India

Job Description

Duties & Responsibilities

• Engineer and maintain SIEM ingestion pipelines, including data connectors, parsers, normalization, and enrichment across endpoint, network, cloud, identity, and app telemetry sources.
• Build, tune, and update detection rules, correlation logic, and analytics aligned to MITRE ATT&CK, threat intelligence, and evolving TTPs.
• Operate and enhance Cribl Stream and Cribl Edge pipelines for log routing, transformation, filtering, enrichment, and delivery optimization.
• Support onboarding of new log sources, including schema mapping, troubleshooting ingestion failures, and validating data quality and completeness.
• Assist in reducing false positives and improving signaltonoise through SIEM tuning, enrichment enhancements, and Cribl workflow adjustments.
• Develop queries, dashboards, and data models used by SOC and IR teams for investigations, monitoring, and hunting.
• Monitor telemetry ingestion metrics, SIEM health, license usage, and Cribl pipeline performance; identify and resolve operational issues.
• Perform investigation support by validating detections, analyzing telemetry gaps, and implementing fixes to improve future coverage.
• Mentor junior analysts and engineers on SIEM query languages (KQL/SPL), detection development, logging best practices, and Cribl pipeline fundamentals.
• Maintain SIEM and telemetry documentation including data dictionaries, ingestion maps, detection catalogs, and engineering runbooks.
  

Requirements

Basic Qualifications

• Proficient in various cybersecurity frameworks and standards.
• Experience with security tools such as SIEM, firewalls, and intrusion detection systems.

Preferred Qualifications

• Master’s degree in Cybersecurity or related field.