Senior SIEM Engineer - ArcSight/Splunk

Ericsson GmbH; Dadri; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Ericsson Noida is seeking an experienced SIEM Engineer to design, implement, and operate advanced SIEM solutions within Managed Security Services. You will build detection rules, dashboards, and playbooks while coordinating with cross-functional teams to strengthen security operations.

The role requires deep SIEM expertise, strong incident response skills, and the ability to drive automation in SOC workflows.

Qualifications

• 8 to 15 years of experience in cybersecurity and SIEM
• Hands-on with SIEM platforms like QRadar, ArcSight, Splunk or McAfee ESM
• Experience in incident response, threat hunting, and security audits

Responsibilities

• Design, deploy, and manage SIEM tools and log integrations
• Create, tune, and maintain detection rules and dashboards
• Investigate and respond to security incidents and alerts
• Participate in security audits, threat hunting, and compliance checks
• Research emerging threats and enhance detection capabilities
• Support configuration management, system hardening, and network defense strategies
• Collaborate across teams to improve security operations and automation

Skills

SIEM platforms

Log integrations

Incident response

Threat hunting

Linux/Windows

Network security

Automation scripting

On-call availability

Security certifications

Tools

Nessus

Qualys

CyberArk

BeyondTrust

Job description

Join our Team

About this opportunity:

At Ericsson, We are seeking a skilled SIEM Engineer to join our Managed Security Services team. You will be responsible for designing, implementing, managing, and supporting cybersecurity solutions, with a focus on SIEM tools and incident response. This is a hands-on technical role working with internal teams, customers, and third-party vendors to ensure robust security practices.

What you will do:

• Design, deploy, and manage SIEM tools (e.g., QRadar, ArcSight, Splunk, McAfee ESM) and log integrations
• Create, tune, and maintain detection rules and dashboards
• Investigate and respond to security incidents and alerts
• Participate in security audits, threat hunting, and compliance checks
• Research emerging threats and enhance detection capabilities
• Support configuration management, system hardening, and network defense strategies
• Collaborate across teams to improve security operations and automation

The skills you bring:

• Strong hands-on experience with SIEM platforms & SIEM tools (e.g., QRadar, ArcSight, Splunk, McAfee ESM) and log integrations
• Deep understanding of security operations, incident response, and network/system security
• Experience with scanning tools (e.g., Nessus, Qualys) and PAM solutions (e.g., CyberArk, BeyondTrust)
• Solid knowledge of Linux/Windows environments and enterprise networks
• Familiar with encryption, security controls, and system hardening best practices
• Excellent analytical, troubleshooting, and communication skills
• Security certifications (e.g., CEH, CISSP, GCIA, GCIH)
• Experience in automation and scripting for SOC workflows
• Willingness to participate in on-call support rotation
• 8 to 15 Years of Experience is required.

All academic credentials must be from recognized and accredited institutions and are further subject to verification.

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer.

Primary country and city: India (IN) || Noida