SME - SIEM ( SO1 )

Microland Limited; Bengaluru; On-site; INR 4,000,000 - 6,400,000; Full time

Job summary

Microland Limited is seeking a Senior Security Architect to lead the design and governance of enterprise SIEM ecosystems across Sentinel, Splunk, and ArcSight. You will oversee SOAR workflows and drive automated responses within the SOC.

You will define threat detection frameworks using analytics, AI-driven correlation, and contextual threat intel, while shaping data security architectures across hybrid and cloud environments.

Qualifications

• Architecting and governing enterprise-scale SIEM ecosystems across Sentinel, Splunk, and ArcSight, ensuring seamless integration and optimized visibility.

Responsibilities

• Architect and govern enterprise SIEM ecosystems across Sentinel, Splunk, ArcSight.
• Oversee SOAR solution architecture and automate response workflows.
• Develop threat detection frameworks with analytics and AI-driven correlation.
• Define data security architectures and cloud/hybrid compliance.
• Mentor L1/L2 engineers and lead incident communications and post-incident analysis.
• Foster collaboration across delivery teams and resolve conflicts.

Skills

SIEM governance

SOAR architecture

Threat detection

Cloud security

Mentorship

Incident response

Team collaboration

Education

Any Graduate

Tools

Sentinel

Splunk

ArcSight

Splunk SOAR

Job description

Education Qualification :

Any Graduate

Certification :

Technology | CISM/Microsoft Certified: (SC-200)/Splunk Core Certified Consultant/ArcSight Advanced Analyst Certification/Splunk SOAR Certified Automation Developer/ITIL Foundation

Experienced architecting and governing enterprise-scale SIEM ecosystems across Sentinel, Splunk, and ArcSight, ensuring seamless integration and optimized visibility.

Experienced in SOAR solution architecture, overseeing the automation of response workflows and establishing governance across the SOC ecosystem.

Knowledgeable in design and continuous evolution of threat detection frameworks, leveraging custom analytics, AI-driven correlation, and contextual threat intelligence.

Aware in defining and implementing data security architectures and compliance frameworks across hybrid and cloud environments.

Provides mentorship and guidance to Level 1 and Level 2 engineers, fostering skill development through continuous knowledge sharing, structured handovers, and adoption of best practices. Acts as the primary technical contact during major incidents and escalations, ensuring timely communication, effective resolution, and comprehensive post-incident analysis. Promotes a collaborative and positive team culture by proactively resolving conflicts and strengthening cohesive relationships across delivery teams.