Senior SIEM Engineer

Tekskills Inc.; Bengaluru; Vor Ort; INR 2.500.000 - 4.000.000; Vollzeit

Zusammenfassung

Tekskills Inc. seeks a Senior SIEM Engineer to join the SOC team in Chennai, TN. The role requires hands-on SIEM expertise with Splunk and Microsoft Sentinel, plus incident management and use-case development capabilities.

You will engage in log source integration, SIEM architecture, and alignment with MITRE ATT&CK/Kill Chain frameworks while supporting regulatory compliance and 24x7 SOC operations.

Qualifikationen

• 5+ years of experience in SIEM engineering and SOC operations.
• Hands-on expertise with Splunk Enterprise and Microsoft Sentinel.
• Strong understanding of SIEM architecture, log source integration, and correlation rule development.
• Experience with incident management, alert analysis, and use case development.
• Familiarity with MITRE ATT&CK and Kill Chain frameworks.
• Knowledge of vulnerability management, security hardening, and compliance standards.
• Ability to troubleshoot SIEM platform issues and integrate new devices.
• Strong analytical, documentation, and reporting skills.
• Excellent communication and collaboration abilities.

Aufgaben

• Develop and maintain SIEM dashboards and alerts.
• Design and tune correlation rules and use cases.
• Collaborate with SOC to monitor incidents and respond timely.
• Integrate new devices and log sources into SIEM platforms.
• Support audit activities and regulatory checks.

Kenntnisse

SIEM engineering

Splunk

Microsoft Sentinel

Incident management

Use case development

MITRE ATT&CK

Kill Chain

Vulnerability management

Troubleshooting

Communication

Tools

Splunk Enterprise

Microsoft Sentinel

Jobbeschreibung

Role: Senior SIEM Engineer

Location: CHENNAI, TN

Skills Required: SIEM Splunk Engineer Level 2

Experience Range Required: 8 - 10 Years (Rel 7 yrs)

Job Description:

• 5+ years of experience in SIEM engineering and SOC operations.


• Hands-on expertise with Splunk Enterprise and Microsoft Sentinel.


• Strong understanding of SIEM architecture, log source integration, and correlation rule development.


• Experience with incident management, alert analysis, and use case development.


• Familiarity with MITRE ATT&CK and Kill Chain frameworks.


• Knowledge of vulnerability management, security hardening, and compliance standards.


• Ability to troubleshoot SIEM platform issues and integrate new devices.


• Strong analytical, documentation, and reporting skills.


• Excellent communication and collaboration abilities.

Good-to-Have Skills

• Experience with other SIEM platforms (e.g., QRadar, Google Chronicle).


• Exposure to SOAR automation and playbook development.


• Familiarity with multi-cloud environments and hybrid log ingestion.


• Knowledge of regulatory frameworks and audit processes.

Additional Information

• Must be able to work in a 24x7 environment as required by SOC operations.


• Willingness to support audit activities and regulatory compliance checks.