Senior Security Engineer

GRIDsentry; Gurugram District; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

GRIDsentry is seeking an Applications Engineer – SIEM to deploy and manage SIEM in substations and control centres, enabling centralized log collection and real‑time threat visibility.

Role focuses on integrating OT/IT data sources, developing use cases, and configuring dashboards to support security monitoring and compliance. Opportunity to work on cutting‑edge grid security solutions in a niche domain.

Qualifications

• 5–8 years experience in SIEM deployment and SOC operations.
• Experience in multi-source log integration and security monitoring environments.
• Exposure to OT/ICS environments is an added advantage.

Responsibilities

• Install, configure, and maintain the SIEM platform in line with project architecture.
• Integrate log sources from substation systems, OT devices, servers and security tools.
• Develop and fine‑tune correlation rules, use cases, and alerting mechanisms.
• Configure dashboards and reports for SOC operations and management visibility.
• Support SOC by monitoring alerts and assisting in incident detection and analysis.

Skills

Log parsing

Log normalization

Security event monitoring

Use case development

Automation scripting (Python/Shell)

Network security basics

OT/ICS awareness

Education

BE / B.Tech in Cybersecurity, Information Technology, Computer Science, or related field.

Tools

SIEM platforms

EDR

HIPS

Job description

Job Description

GRIDsentry is a cybersecurity system integrator specializing in securing power‑grid and digital‑substation infrastructure. We design, integrate, and manage end‑to‑end OT and critical‑infrastructure security solutions for utilities and grid operators. You will work on cutting‑edge technologies like AI‑based intrusion detection, deception systems, and Security Information Management for the grid. Joining GRIDsentry offers exposure to mission‑critical infrastructure projects and rapid professional growth in a niche, high‑impact domain. It is an ideal place for those who want to build expertise in OT and power‑grid cybersecurity while shaping next‑generation security architectures.

The Applications Engineer – SIEM is responsible for the deployment, configuration, integration, and operational management of the SIEM platform within the OT cybersecurity environment across substations and control centres. The role ensures centralized log collection, correlation, threat detection, and security monitoring aligned with SOC operations. The engineer plays a key role in enabling real‑time visibility, incident detection, and compliance monitoring by integrating diverse OT and IT data sources into the SIEM platform and developing actionable security intelligence.

Key Responsibilities

SIEM Deployment & Configuration

• Install, configure, and maintain the SIEM platform in line with project architecture.
• Configure system components including collectors, forwarders, storage, and processing nodes.
• Ensure high availability, scalability, and performance of the SIEM infrastructure.
• Integrate log sources from:
  • Substation systems and OT devices
  • Servers and operating systems
  • Security tools (IDS, endpoint security, etc.)
• Normalize, parse, and validate logs for accurate ingestion and analysis.

Correlation & Use Case Development

• Develop and fine‑tune correlation rules, use cases, and alerting mechanisms.
• Configure dashboards and reports for SOC operations and management visibility.
• Implement use cases aligned with OT cybersecurity threats and compliance requirements.
• Support SOC operations by monitoring alerts and assisting in incident detection and analysis.
• Investigate anomalies and elevate security incidents as per defined procedures.
• Optimize alert thresholds to reduce false positives and improve detection accuracy.
• Integrate SIEM with other cybersecurity systems including:
  • Endpoint Security (EDR, HIPS)
  • Vulnerability Management Systems
• Ensure seamless data exchange and interoperability across platforms.

Performance Optimization & Maintenance

• Monitor SIEM performance and implement tuning for efficient resource utilization.
• Perform regular maintenance, updates, and health checks.
• Ensure data retention policies and storage management are maintained.

Compliance & Reporting

• Generate reports for security monitoring, compliance, and audit requirements.
• Ensure SIEM configurations align with project and regulatory compliance standards.
• Maintain documentation related to SIEM configuration and operations.

Experience

• 5–8 years experience in SIEM deployment, configuration, and SOC operations.
• Experience in multi‑source log integration and security monitoring environments.
• Exposure to OT/ICS environments is an added advantage.

Skills

• Log parsing, normalization, and correlation
• Security event monitoring and analysis
• Use case development and alert tuning
• Basic scripting (Python, Shell) for automation (preferred)
• Understanding of network and endpoint security systems

Qualification

• B.E / B.Tech in Cybersecurity, Information Technology, Computer Science, or related field.