SIEM Engineering

Orcapod Consulting Services; Chennai; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Orcapod Consulting Services in Chennai is seeking a Senior Security Engineer specializing in SIEM, SOAR and detection engineering. The role focuses on designing and optimizing enterprise SIEM platforms, developing detection rules, and building automated incident response workflows.

You will perform proactive threat hunting across cloud and on-prem environments, integrate telemetry from multiple sources, and align coverage with MITRE ATT&CK and related frameworks.

Qualifications

• SIEM Engineering: Google SecOps / Chronicle, Splunk, Microsoft Sentinel.
• Detection Engineering: YARA-L, Sigma, SPL, KQL.
• SOAR Automation: Google SecOps SOAR / Siemplify, Splunk SOAR / Phantom, Cortex XSOAR.
• Threat Hunting: Hypothesis-driven hunting, behavioral analysis, APT detection.
• Python Scripting: Security automation, REST API integrations.
• Security Telemetry: BindPlane, OpenTelemetry, Logstash, Fluent Bit, Syslog.
• CI/CD: Git, GitHub Actions, GitLab CI.
• Security Frameworks: MITRE ATT&CK, D3FEND, Cyber Kill Chain.

Responsibilities

• Design, implement, and optimize enterprise SIEM platforms.
• Develop, test, and deploy detection rules using YARA-L, Sigma, SPL, or KQL.
• Build automated incident response and investigation playbooks.
• Perform proactive threat hunting across cloud and on-premises environments.
• Integrate security logs and telemetry from multiple sources.
• Implement detection-as-code using version control and CI/CD pipelines.
• Map detection coverage to MITRE ATT&CK and identify security visibility gaps.
• Automate security workflows using Python and REST APIs.

Skills

SIEM Engineering

Detection Engineering

SOAR Automation

Threat Hunting

Python Scripting

Security Telemetry

CI/CD

Security Frameworks

Tools

Splunk

Google Chronicle

Microsoft Sentinel

Siemplify

Splunk SOAR

Phantom

Cortex XSOAR

Job description

Job Description Summary Security Engineer (Detection & Response / SIEM & SOAR)

Experience: 7–12 years Role: Senior Security Engineer – SIEM, SOAR & Detection Engineering

1. Mandatory Skills

• SIEM Engineering: Google SecOps / Chronicle, Splunk, Microsoft Sentinel
• Detection Engineering: YARA-L, Sigma, SPL, KQL
• SOAR Automation: Google SecOps SOAR / Siemplify, Splunk SOAR / Phantom, Cortex XSOAR
• Threat Hunting: Hypothesis-driven hunting, behavioral analysis, APT detection
• Python Scripting: Security automation, REST API integrations
• Security Telemetry: BindPlane, OpenTelemetry, Logstash, Fluent Bit, Syslog
• CI/CD: Git, GitHub Actions, GitLab CI
• Security Frameworks: MITRE ATT&CK, D3FEND, Cyber Kill Chain

2. Key Responsibilities

• Design, implement, and optimize enterprise SIEM platforms.
• Develop, test, and deploy detection rules using YARA-L, Sigma, SPL, or KQL.
• Build automated incident response and investigation playbooks.
• Perform proactive threat hunting across cloud and on-premises environments.
• Integrate security logs and telemetry from multiple sources.
• Implement detection-as-code using version control and CI/CD pipelines.
• Map detection coverage to MITRE ATT&CK and identify security visibility gaps.
• Automate security workflows using Python and REST APIs.