SIEM Engineer,

Link Management Solutions Pvt. Ltd; Mumbai Suburban; On-site; INR 600,000 - 1,200,000; Full time

Job summary

A technology services firm in Mumbai is seeking a dedicated System Security professional. You will be responsible for ensuring the effective use of Client SIEM, developing log parsing and collection methods, and adhering to PCI compliance. Ideal candidates possess strong networking skills, and knowledge of SIEM technologies, and must communicate effectively. This position provides opportunities for professional development in a growing IT environment.

Qualifications

• Experience with enterprise SIEM architecture and components.
• Ability to work independently and in teams.
• Good verbal and written communication skills.

Responsibilities

• Study current status of Logging for customers and ensure expected outcome.
• Develop, Support and Enhance event parsing and log collection.
• Configure queries, correlation rules, dashboards, and alerts.

Skills

Expertise with regular expressions

Knowledge of SIEM rules

TCP/IP

Linux operating system

Knowledge about security technologies

Interpersonal skills

Analytical skills

Knowledge on security standards

Education

B.E/B.Tech in relevant field

Tools

Alien Vault

Qradar

Splunk

LogRhythm

ArcSight

Job description

Overview

Study current status of Logging for a customer and bring them to expected state to ensure they are using latest version of Client SIEM, parsing of logs etc. in a predefined period.

Responsibilities

1. Study current status of Logging for a customer and bring them to expected state to ensure they are using latest version of Client SIEM, parsing of logs etc. in a predefined period.
2. Develop, Support and Enhance event parsing, log collection and storage, compliance automation and identity monitoring activities.
3. Develop & Enhance processes and procedures around security event management.
4. Configure queries, correlation rules, dashboards, alerts, searches, reports, etc., based on operating systems, platform, data type, and other reporting elements.
5. Troubleshoot log collection from networking devices, operating systems, databases, security applications, and more.
6. Gather and understand technical requirements related to functionality, design, and integration.
7. Install and configure the SIEM including all its components, local & or remote log collectors.
8. Plan & execute SIEM migration activities.
9. Identify, design & implement use cases to address PCI compliance along with specific enterprise security requirement.

Qualifications

1. Requirement: Expertise with use of regular expressions.
2. Knowledge of building and managing SIEM rules, reports and offenses.
3. TCP/IP, LINUX operating system and features such as vi, iptables, ssh, cat, tail, grep etc
4. Knowledge about security technologies such as firewalls, encryption using keys, SSL, HTTPS, SSH, intrusion detection, routing switch ACLs, VLAN, Span Ports, Network IDS / IPS platforms.
5. Knowledge of building and managing SIEM rules, reports.
6. Experience with enterprise SIEM architecture and components.
7. Experience with either Alien Vault, AccelOps, Qradar, Splunk, Nitro, LogRythm, ArcSight, OSSIM or others will have added advantage.
8. You need to be dedicated, smart & hunger for learning/experimenting with new technologies/tools etc.
9. Good interpersonal, verbal and written communication skills.
10. Result oriented with good analytical skills.
11. Ability to exercise prudent judgment and offer knowledgeable advice.
12. Ability to work both independently and in a team environment.
13. Knowledge on Security standards like PCI-DSS, ISO 27001, etc.
14. Have a solid working knowledge of networking technology and tools, firewalls, proxies, and the OSI Model, including TCP/IP protocols and standards.
15. Preferred Certification: CEH, RHCSS, GIAC, GCIH, GCIA, GREM, SANS.

Functional Area

IT Software - Application Programming / Maintenance

Role

System Security

Course

• B.E
• B.Tech
• Applied Marine Information Technology and Communitcation
• Information Technology Engineering
• Business Computing and Information Systems

Industries

• IT-Software/Software Services
• IT-Hardware & Networking
• Internet/Ecommerce
• Security/Law Enforcement