SIEM Engineering L3

Kyndryl; Dadri; On-site; INR 800,000 - 1,100,000; Full time

Job summary

Kyndryl is seeking a cybersecurity professional in India to protect systems and data, with hands-on threat hunting and incident response. You will work across EDR, NDR, forensics, and intelligence analysis, coordinating end-to-end integrations within security operations.

The role focuses on proactive threat detection, incident management, and preserving evidence for investigations. The ideal candidate has 5–8 years of related experience and strong integration capabilities.

Qualifications

• 5–8 years of experience in cybersecurity roles.
• Experience with log source onboarding and integration projects.
• Proficiency in threat detection and security incident handling.
• Exposure to EDR, NDR, and security analytics.

Responsibilities

• Perform threat hunting to identify advanced threats and IOCs.
• Engage in endpoint detection and response for incidents.
• Collect and preserve digital evidence for forensics.
• Participate in incident management and response processes.
• Use NDR to monitor network traffic for unusual activity.
• Analyze information to identify security risks.

Skills

Onboarding of Log Source

Migration

Upgrade

Detection Use Case

Automation

End-to-End integration

Job description

Shift & schedule : 5 days office (Rotational)

Job Description Summary:

Works to protect organizational systems, networks, and data from unauthorized access, theft, damage, or other malicious activities. Proactively engages in the threat hunting process, searching for advanced threats, attackers, and indicators of compromise (IOCs) that may have evaded existing security measures, to identify and mitigate security threats before they cause significant harm to an organization. Engages in endpoint detection and response (EDR) to detect and respond to security incidents at the endpoint level, such as on individual workstations, laptops, servers, and other devices. Participates in collecting, analyzing, and preserving digital data for use as evidence in investigating cybercrimes, security breaches, and other types of digital incidents for the purposes of forensics. Utilizes the incident management process of managing and responding to cybersecurity incidents, which may include unauthorized access to systems, data breaches, malware infections, denial-of-service attacks, and other types of cyber threats. Uses Network Detection and Response (NDR) to monitor network traffic and identify and respond to unusual or suspicious activity. Gathers, analyzes, and interprets information to identify potential security threats and risks as part of security intelligence analysis.

Requirement Specification :

Exp : 5-8 Yrs

Skills required:

• Onboarding of Log Source.
• Migration.
• Upgrade.
• Detection Use Case.
• Automation
• Need to have end to end integration exp in project. Should have mostly worked on integration part.