Siem Engineer

Computacenter; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Computacenter is seeking a seasoned Cyber Security Engineer in Bengaluru to strengthen our SIEM-focused operations. The role emphasizes hands-on work with Microsoft Sentinel, XDR, Defender for Cloud, and Azure cloud services to improve detection coverage, visibility, and automation across a global enterprise environment.

The candidate should bring 8–12 years in cyber security with at least 5 years in SIEM engineering, strong KQL skills, and a passion for automating security workflows.

Qualifications

• 8 to 12 years overall experience in Cyber security with 5+ years in SIEM engineering and Microsoft Sentinel expertise.
• Demonstrated hands-on experience with Microsoft security technologies such as Sentinel, XDR and Defender for Cloud.
• Strong knowledge of KQL for detections, investigations and reporting, plus scripting automation experience.

Responsibilities

Skills

SIEM engineering

Microsoft Sentinel

KQL

Automation scripting

Azure cloud technologies

Azure Monitor/Log Analytics

PowerShell/Logic Apps

Troubleshooting security platforms

Tools

Microsoft Sentinel

Microsoft XDR

Microsoft Defender for Cloud

Azure DevOps

Cribl

Job description

Life on the team

Join a highly skilled Cyber Engineering team focused on building and enhancing modern security operations capabilities across a global enterprise environment. You will work at the intersection of security engineering, cloud technologies, SIEM operations, automation, and AI-driven security innovation, helping to protect critical business services through scalable and resilient security solutions.

This role offers the opportunity to work with industry-leading technologies including Microsoft Sentinel, Microsoft XDR, Microsoft Defender for Cloud, Azure, Cribl, Logic Apps, and Azure DevOps. You'll collaborate with security analysts, cloud engineers, infrastructure teams, architects, and platform specialists to design and deliver security capabilities that improve visibility, strengthen detection coverage, and drive operational efficiency.

We are looking for someone who enjoys solving complex technical challenges, automating repetitive tasks, and continuously improving security platforms through engineering excellence and innovation.

What youll need

Essential Skills & Experience

• 8 to 12 years overall experience in Cyber security and 5+ years of hands-on experience in SIEM engineering, Microsoft Sentinel expertise, KQL skills, and hands-on Microsoft Security experience are mandatory.
• Hands-on experience with one or more Microsoft security technologies such as:
• Microsoft Sentinel
• Microsoft XDR
• Microsoft Defender for Cloud
• Azure Monitor / Log Analytics
• Strong understanding of Kusto Query Language (KQL) for detections, investigations, and reporting.
• Experience with automation and scripting using PowerShell, Logic Apps, APIs, or workflow orchestration tools.
• Good understanding of Azure, networking, cloud technologies, identity management, and Windows/Linux operating systems.
• Proven ability to troubleshoot technical issues across security platforms, data pipelines, and integrations.
• Experience working with source control,documentation standards, and change management processes.

Desirable Skills

• Cribl administration, pipeline development, or log routing experience.
• Sentinel as Code and Infrastructure-as-Code experience.
• Azure DevOps and CI/CD pipeline implementation experience.
• Threat hunting and advanced detection engineering knowledge.
• Experience integrating third-party SaaS,cloud, or infrastructure audit logs into SIEM platforms.
• Exposure to large enterprise or managed security service environments.
• Interest in leveraging AI and automation to improve security operations.

Personal Attributes

• Strong analytical and problem-solving skills.
• Passion for automation and continuous improvement.
• Engineering-first mindset with a focus on scalability and efficiency.
• Effective communicator with strong documentation skills.
• Collaborative team player who can work across security, cloud, infrastructure, and operations teams.
• Self-motivated learner with a desire to expand expertise across modern security technologies.