SOC L3 Engineer (Elastic SIEM & SOAR)

Happiest Minds Technologies; Dadri, Pune District, Bengaluru; Hybrid; INR 1,400,000 - 2,100,000; Full time

Job summary

Happiest Minds Technologies in Bangalore is seeking an experienced SOC L3 professional with deep hands-on expertise in Elastic Security (SIEM) and SOAR to strengthen our security operations. The role focuses on SIEM implementation, content engineering, threat hunting, incident response, and SOC optimization across platforms.

The candidate will work with Elastic SIEM, Elastic Security, and cross‑platform tools such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight and more, while

Qualifications

• Hands-on experience with Elastic SIEM / Elastic Security.
• Experience with Elastic Defend, Kibana, Elasticsearch, Logstash, Beats, Fleet, and detection engineering.
• Hands-on experience in SOAR implementation and automation orchestration.
• Experience with other SIEM platforms such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, etc.
• Strong understanding of Windows, Linux, Active Directory, Azure, AWS, networking and cloud security.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC analysis and threat intelligence.
• Scripting in Python, PowerShell or Bash for automation.
• Understanding of EDR/XDR, NDR, Email Security, IAM and security controls integration.

Skills

Elastic SIEM

Elastic Security

Elastic Defend

Kibana

Elasticsearch

Logstash

Beats

Fleet

Detection engineering

SOAR

Automation

Orchestration

Microsoft Sentinel

QRadar

Splunk

FortiSIEM

ArcSight

Sumo Logic

Stellar Cyber

Windows

Linux

Active Directory

Azure

AWS

Networking

Cloud security

MITRE ATT&CK

Cyber Kill Chain

IOC analysis

Threat intelligence

Python

PowerShell

Bash

EDR/XDR

NDR

Email Security

IAM

Security Controls

Job description

JD:

SOC L3 Engineer (Elastic SIEM & SOAR)

Exp: 5-12 YRS

Location: Bangalore

Role: Permanent

Comfortable to work on 24/7 shift timings.

Role Summary

Seeking an experienced SOC L3 professional with strong expertise in Elastic Security (SIEM) and SOAR platforms. The candidate should possess hands‑on experience in SIEM implementation, administration, content engineering, threat hunting, incident response, and SOC optimization across multiple SIEM technologies such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, or similar platforms.

Required Skills:

• Strong hands‑on experience with Elastic SIEM / Elastic Security.


• Experience with Elastic Defend, Kibana, Elasticsearch, Logstash, Beats, Fleet, and detection engineering.


• Hands‑on experience in SOAR implementation and automation orchestration.


• Experience implementing or managing other SIEM platforms such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, Stellar Cyber, or equivalent.


• Strong understanding of Windows, Linux, Active Directory, Azure, AWS, networking, and cloud security.


• Knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat intelligence.


• Experience with scripting (Python, PowerShell, Bash) for automation.


• Understanding of EDR/XDR, NDR, Email Security, IAM, and Security Controls integration.