Senior Security Engineer - Integration

SecurityHQ Ltd.; Pune District; On-site; INR 1,300,000 - 2,500,000; Full time

Job summary

SecurityHQ Ltd. in Pune seeks a Senior Security Engineer to support our 247 managed security operations center. The role sits in the Integration Department, guiding the strategic and technical direction of the team.

You'll onboard devices to SIEM platforms, develop connectors, and ensure log validation and content management before production. Strong scripting, cloud awareness, and excellent communication are essential for coordinating with customers and internal teams.

Qualifications

• Experience administering and integrating SIEM platforms.
• Ability to onboard devices and collect logs from multiple sources.
• Proficiency with scripting languages (bash, python, PowerShell).
• Excellent communication and coordination with clients and internal teams.

Responsibilities

• Onboard devices to QRadar/Sentinel/Datadog. Manage event collection and content.
• Troubleshoot across OSI layers and support integrations.
• Develop connectors and scripts for log collection for cloud solutions.
• Validate log parsing and normalization before handing over to SOC.

Skills

SIEM integration

QRadar

Splunk

Datadog

Azure Sentinel

Network & endpoint integration

Log parsing

Regex & scripting

API development

Cloud technologies

Communication skills

Job description

Profile Overview

Were searching for Senior Security Engineer to assist our 247 managed security operations center. This role is in Integration Department, responsible for the strategic, technical, and operational direction of the Integration Team

Roles and Responsibilities

• IBM QRadar/ Sentinel / Datadog , Integration and content management, Event Collector deployment/upgradation.
• Troubleshooting skills at all layers of OSI Model.
• Onboard all standard devices to QRadar, such as Windows Security Events, Firewalls, Antivirus, Proxy etc.
• Onboard non-standard devices by researching the product and coordinating with different teams. Such as application onboarding or onboarding new security products.
• Developing and Deploying connectors and scripts for log collection for cloud-based solutions.
• Detailed validation of parsing and normalization of logs before handing over to SOC team will be day to day Job.
• Coordinate between customer and internal teams for issues related to log collection.
• The engineer needs to make sure that various team have completed their tasks, such as log validation, Log Source Not Reporting (LSNR Automation), Content Management before the Log Source is in production.
• Troubleshooting API based log sources.
• Documentation of integrations and versioning .

Essential Skills

• Prior SIEM administration and integration experience ( QRadar , Splunk , Datadog , Azure Sentinel)
• Network and Endpoint Device integration and administration
• Knowledge of Device Integration : Log , Flows collection
• Knowledge of Regular Expression and scripting language (ex: Bash , Python , PowerShell ), API implementation and development.
• Knowledge of Parser creation and maintenance .
• Knowledge of Cloud technologies and implementation .
• Excellent in verbal and written communication .
• Hands on experience in Networking , Security Solutions and Endpoint Administration and operations .