Senior Security Engineer

GRIDsentry; Haryana; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

GRIDsentry is seeking an Applications Engineer – SIEM to deploy, configure, and operate SIEM within OT cybersecurity across substations and control centres. You will centralize log collection, correlate data, and monitor security events to support SOC operations.

The role focuses on integrating diverse OT/IT sources, developing actionable security intelligence, and maintaining compliance with security standards. Experience in OT environments is a plus.

Qualifications

• 5–8 years experience in SIEM deployment, configuration, and SOC operations.
• Experience with multi‑source log integration and security monitoring.
• Exposure to OT/ICS environments is an added advantage.

Responsibilities

• SIEM Deployment & Configuration: Install, configure, and maintain the SIEM platform per project architecture.
• Log Integration & Data Onboarding: Integrate log sources from substation systems, OT devices and IT assets.
• Correlation & Use Case Development: Develop and tune correlation rules and alerting mechanisms.
• Monitoring & Incident Support: Monitor alerts, assist in incident detection and analysis for SOC.
• Integration & Interoperability: Integrate SIEM with IDS/IPS, EDR, vulnerability management.
• Performance Optimization & Maintenance: Tune performance, perform maintenance and health checks.
• Compliance & Reporting: Generate reports for security monitoring and audits.

Skills

SIEM platforms

Log parsing

Security monitoring

Use case development

Python scripting

OT/ICS security

Education

BE / B.Tech in Cybersecurity, IT, CS or related field

Tools

Splunk

IBM QRadar

ArcSight

Elastic SIEM

Job description

About Us -

GRIDsentry is a cybersecurity system integrator specializing in securing power‑grid and digital‑substation infrastructure. We design, integrate, and manage end‑to‑end OT and critical‑infrastructure security solutions for utilities and grid operators. You will work on cutting‑edge technologies like AI‑based intrusion detection, deception systems, and Security Information Management for the grid. Joining GRIDsentry offers exposure to mission‑critical infrastructure projects and rapid professional growth in a niche, high‑impact domain. It is an ideal place for those who want to build expertise in OT and power‑grid cybersecurity while shaping next‑generation security architectures.

Work location - Manesar, Haryana.

Job Description -

The Applications Engineer – SIEM is responsible for the deployment, configuration, integration, and operational management of the SIEM platform within the OT cybersecurity environment across substations and control centres. The role ensures centralized log collection, correlation, threat detection, and security monitoring aligned with SOC operations. The engineer plays a key role in enabling real‑time visibility, incident detection, and compliance monitoring by integrating diverse OT and IT data sources into the SIEM platform and developing actionable security intelligence.

Key Responsibilities -

SIEM Deployment & Configuration

• Install, configure, and maintain the SIEM platform in line with project architecture.
• Configure system components including collectors, forwarders, storage, and processing nodes.
• Ensure high availability, scalability, and performance of the SIEM infrastructure.

Log Integration & Data Onboarding

• Integrate log sources from:
• Substation systems and OT devices
• Network devices (firewalls, switches, routers)
• Servers and operating systems
• Security tools (IDS, endpoint security, etc.)
• Normalize, parse, and validate logs for accurate ingestion and analysis.

Correlation & Use Case Development

• Develop and fine‑tune correlation rules, use cases, and alerting mechanisms.
• Configure dashboards and reports for SOC operations and management visibility.
• Implement use cases aligned with OT cybersecurity threats and compliance requirements.

Monitoring & Incident Support

• Support SOC operations by monitoring alerts and assisting in incident detection and analysis.
• Investigate anomalies and
• Elevate security incidents as per defined procedures.

Integration & Interoperability

• Integrate SIEM with other cybersecurity systems including:
• IDS / IPS
• Endpoint Security (EDR, HIPS)
• Vulnerability Management Systems
• Ensure seamless data exchange and interoperability across platforms.

Performance Optimization & Maintenance

• Monitor SIEM performance and implement tuning for efficient resource utilization.
• Perform regular maintenance, updates, and health checks.
• Ensure data retention policies and storage management are maintained.

Compliance & Reporting

• Generate reports for security monitoring, compliance, and audit requirements.
• Ensure SIEM configurations align with project and regulatory compliance standards.
• Maintain documentation related to SIEM configuration and operations.

Experience -

• 5–8 years experience in SIEM deployment, configuration, and SOC operations.
• Experience in multi‑source log integration and security monitoring environments.
• Exposure to OT/ICS environments is an added advantage.

Skills -

• SIEM platforms (e.g., Splunk, IBM QRadar, ArcSight, Elastic SIEM)
• Log parsing, normalization, and correlation
• Security event monitoring and analysis
• Use case development and alert tuning
• Basic scripting (Python, Shell) for automation (preferred)
• Understanding of network and endpoint security systems

Qualification -

• B.E / B.Tech in Cybersecurity, Information Technology, Computer Science, or related field.

Certifications (Preferred) -

• SIEM Platform Certifications (Splunk / QRadar / ArcSight)
• CompTIA Security+
• Certified SOC Analyst (CSA)
• CEH (Certified Ethical Hacker)