SIEM Architect / Cybersecurity Architect– Microsoft Sentinel / SIEM

HireFlex; India; Vor Ort; INR 1.200.000 - 2.400.000; Vollzeit

Zusammenfassung

HireFlex is hiring a SIEM Architect / Cybersecurity Architect with hands-on experience in Microsoft Sentinel, Azure Security, SIEM integrations, telemetry engineering, KQL, and detection engineering.

The role focuses on enterprise-scale SIEM onboarding, log integration design, telemetry pipeline engineering, and operational troubleshooting, with mentoring responsibilities for junior engineers.

Qualifikationen

• 8+ years in security engineering.
• 6+ years in enterprise SIEM.
• Hands-on with Microsoft Sentinel and Azure Security.
• Experience mentoring engineers.

Aufgaben

• Qualify and assess new SIEM onboarding requirements and integrations.
• Review architecture, authentication, security controls, and connectivity requirements.
• Design and review log onboarding patterns and telemetry pipelines.
• Develop and maintain Data Collection Rules (DCRs), parsers, and transformations.
• Support ASIM normalization and security telemetry schema design.
• Estimate telemetry volumes and support retention and cost assessments.
• Develop and optimize KQL queries and detection use cases.
• Troubleshoot log ingestion, connectivity, authentication, and data-quality issues.
• Support onboarding of applications, infrastructure, cloud platforms, and security tools into the SIEM.
• Develop reusable onboarding standards, engineering patterns, and accelerators.
• Collaborate with Security Engineering, Threat Monitoring, Infrastructure, Technology, and platform teams.
• Provide technical guidance and mentoring to junior engineers.

Kenntnisse

SIEM onboarding

Telemetry engineering

KQL

Detection engineering

Security architecture

Mentoring

Microsoft Sentinel

Azure Security

Log ingestion

Tools

Splunk

QRadar

Elastic

Azure Monitor Agent

Syslog

Logstash

Fluent Bit

Beats

Jobbeschreibung

We’re Hiring: Hiring: SIEM Architect / Cybersecurity Architect – Microsoft Sentinel / SIEM

We are looking for a SIEM Architect / Cybersecurity Architect with strong hands-on experience in Microsoft Sentinel, Azure Security, SIEM integrations, telemetry engineering, KQL, and detection engineering.

The role will focus on enterprise-scale SIEM onboarding, log integration design, telemetry pipeline engineering, security architecture validation, and operational troubleshooting.

Experience Required

• 8+ years of overall Security Engineering experience
• 6+ years of hands-on experience with enterprise SIEM platforms
• Strong hands-on experience with Microsoft Sentinel
• Strong Microsoft Azure Security experience
• Advanced KQL and detection engineering experience
• Strong experience in SIEM integration design and log onboarding
• Experience with telemetry and log engineering at enterprise scale
• Experience conducting security architecture and integration reviews
• Experience mentoring junior engineers

Key Responsibilities

• Qualify and assess new SIEM onboarding requirements and integrations
• Review architecture, authentication, security controls, and connectivity requirements
• Design and review log onboarding patterns and telemetry pipelines
• Develop and maintain Data Collection Rules (DCRs), parsers, and transformations
• Support ASIM normalization and security telemetry schema design
• Estimate telemetry volumes and support retention and cost assessments
• Develop and optimize KQL queries and detection use cases
• Troubleshoot log ingestion, connectivity, authentication, and data-quality issues
• Support onboarding of applications, infrastructure, cloud platforms, and security tools into the SIEM
• Develop reusable onboarding standards, engineering patterns, and accelerators
• Collaborate with Security Engineering, Threat Monitoring, Infrastructure, Technology, and platform teams
• Provide technical guidance and mentoring to junior engineers

Required Technical Skills

• Microsoft Sentinel
• SIEM platforms such as Splunk, QRadar, or Elastic
• Log ingestion technologies including Azure Monitor Agent (AMA), Syslog, Logstash, Fluent Bit, and Beats
• ASIM and SIEM data normalization
• Cloud Security Engineering
• Linux and container platforms
• Git and CI/CD practices
• Telemetry and log pipeline engineering

Preferred Profile:

• Strong experience delivering enterprise SIEM onboarding or migration programmes
• Experience designing scalable and cost-efficient telemetry architectures
• Strong understanding of security monitoring and detection engineering
• Ability to translate business and security requirements into technical onboarding patterns
• Strong troubleshooting and stakeholder-management skills
• Experience working across Security Engineering, SOC, Infrastructure, and application teams