Senior SIEM Engineer

Tekskills Inc.; Hyderabad; Presencial; INR 2.400.000 - 3.200.000; Jornada completa

Descripción de la vacante

Tekskills Inc. in Chennai is seeking a Senior SIEM Engineer to lead security analytics and SOC operations. Your role centers on designing, tuning, and maintaining SIEM capabilities across on-prem and cloud sources.

You will implement correlation rules, manage incidents, and work with cross-functional teams to strengthen threat detection. Strong Splunk and Microsoft Sentinel expertise, plus knowledge of MITRE ATT&CK, are essential for success.

Formación

• 5+ years of experience in SIEM engineering and SOC operations.
• Hands-on expertise with Splunk Enterprise and Microsoft Sentinel.
• Strong understanding of SIEM architecture, log source integration, and correlation rule development.
• Experience with incident management, alert analysis, and use case development.
• Familiarity with MITRE ATT&CK and Kill Chain frameworks.
• Knowledge of vulnerability management, security hardening, and compliance standards.
• Ability to troubleshoot SIEM platform issues and integrate new devices.
• Strong analytical, documentation, and reporting skills.
• Excellent communication and collaboration abilities.

Responsabilidades

• Design, tune, and maintain SIEM capabilities across on-prem and cloud sources.
• Develop and optimize correlation rules and use cases to improve threat detection.
• Lead incident response and post-incident analysis in SOC operations.
• Collaborate with IT and security teams to remediate vulnerabilities and strengthen controls.
• Keep documentation up to date and produce security reporting.

Conocimientos

SIEM Splunk Engineer Level 2

Herramientas

Splunk Enterprise

Microsoft Sentinel

Descripción del empleo

Role: Senior SIEM Engineer

Location: CHENNAI, TN

Skills Required: SIEM Splunk Engineer Level 2

Experience Range Required: 8 - 10 Years (Rel 7 yrs)

Job Description:

• 5+ years of experience in SIEM engineering and SOC operations.


• Hands-on expertise with Splunk Enterprise and Microsoft Sentinel.


• Strong understanding of SIEM architecture, log source integration, and correlation rule development.


• Experience with incident management, alert analysis, and use case development.


• Familiarity with MITRE ATT&CK and Kill Chain frameworks.


• Knowledge of vulnerability management, security hardening, and compliance standards.


• Ability to troubleshoot SIEM platform issues and integrate new devices.


• Strong analytical, documentation, and reporting skills.


• Excellent communication and collaboration abilities.

Good-to-Have Skills

• Experience with other SIEM platforms (e.g., QRadar, Google Chronicle).


• Exposure to SOAR automation and playbook development.


• Familiarity with multi-cloud environments and hybrid log ingestion.


• Knowledge of regulatory frameworks and audit processes.

Additional Information

• Must be able to work in a 24x7 environment as required by SOC operations.


• Willingness to support audit activities and regulatory compliance checks.