SIEM Engineer

Trantor Inc.; Dadri; Hybrid; INR 2,800,000 - 4,000,000; Full time

Job summary

Trantor Inc. is seeking an experienced SIEM Engineer in India to lead log ingestion, correlation rules and detection strategy development. The role focuses on onboarding diverse log sources into SIEM/ SOAR platforms, creating robust detection rules, and guiding customers on security monitoring best practices.

You will serve as a subject matter expert across SIEM and SOC operations. You will collaborate with client teams to tailor security controls, ensure high-quality data ingestion, and produce

Qualifications

• 6+ years of experience deploying and integrating SIEM at enterprise scale.
• Deep expertise in load, transformation and correlation of log sources (Cloud, Endpoint, Firewall).
• Experience coordinating event collection, log management, event management and compliance automation using SIEM platforms.

Responsibilities

• Devise a comprehensive log ingestion strategy.
• Create meticulous and effective correlation rules.
• Fine-tune log sources and correlation rules to enhance system efficiency.
• Contribute to the development of detection strategies based on industry best practices.
• Articulate a step-by-step process to ensure ingestion of high-quality log sources.
• Monitor and optimize log sources for optimal performance.
• Serve as SME in SIEM/SOAR, correlation, and log source ingestion.
• Provide tailored recommendations and assist in forming effective security strategies.
• Produce technical documentation detailing SIEM and SOAR aspects.

Skills

SIEM engineering

Log ingestion

Detection strategies

Correlation rules

Threat hunting

SOC practices

Security controls

Tools

Splunk

NetWitness

QRadar

ArcSight

Job description

Trantor is a technology services company focused on outsourced product development and digital re-engineering. Leveraging our CaptiveCoE™ engagement model, we operate as a seamless extension of our client’s teams to provide rapid scalability with predictable budgets. Founded in 2012, Trantor has worked with customers across Tech, FinTech, Media & Cybersecurity industries. We have centers in the US, India, Canada, and Costa Rica. We are consistently rated as the #1 employer in the region with the ability to attract and retain technical talent. Our commitment to excellence and impactful results has translated to long‑term relationships and value for our clients and solution partners.

Job Description:

As a SIEM Engineer, you will be responsible for assisting with the log migration and detection strategy of our customers. You will ensure that all of the relevant log sources are onboarded and ingested into SOAR in accordance with industry best practices and customer requirements. You will then work to determine a suitable detection strategy, helping to protect customers from threats, by designing and implementing correlation rules

Job Role & Responsibilities

• Devise a comprehensive log ingestion strategy
• Create meticulous and effective correlation rules
• Fine‑tune log sources and correlation rules to enhance system efficiency
• Contribute to the development of detection strategies based on industry best practices
• Articulate a step‑by‑step process to ensure the ingestion of high‑quality log sources
• Monitor and optimize log sources for optimal performance
• Serve as the subject matter expert (SME) in SIEM and SOAR, correlation, and log source ingestion
• Leverage your in‑depth knowledge of SIEM and SOAR and SOC practices to assess customer needs, provide tailored recommendations, and assist in the formulation of effective security strategies
• Produce technical documentation detailing SIEM and SOAR aspects of the engagement
• The candidate is expected to comply with the company's policies and procedures.

Required Skills

• 6+ years of experience in deploying and integrating (SIEM) to enterprise to large enterprise-level
• Deep expertise with load, transformation and correlation of sources such as Cloud, Endpoint, Firewall
• Coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities using (SIEM) platforms
• Architect-level individual with experience in SIEM (Splunk, Netwitness, QRadar, Arcsight etc.). Candidates with QRadar experience will be preferred.
• Ability to perform Threat Hunting exercises from telemetry.
• Extensive experience in creating and developing correlation and detection rules, within a SIEM to support alerting capabilities.
• A proven ability to offer suggestions on detection strategy based on customer requirements.
• Knowledge of Security Analysis & Response a plus, including both endpoint, network & cloud-based environments.
• Strong technical skills in SIEM/SOAR tools and technologies
• Experience in developing and implementing security strategies
• Experience in conducting security incident responseAbility to define and design security controls based on NIST, CIS, CSA and other standards
• Certifications such as CISSP, CISM, GIAC, SIEM Vendor Qualification would be a plus.
• Excellent communication and interpersonal skills