Principal Information Security Engineer

About the role

This senior technical role is responsible for supporting, maturing, and expanding our Security Operations Center (SOC) logging and monitoring functions. This is a collaborative role and requires an advanced interdisciplinary technical background with skillsets in systems and application administration, data engineering, security operations, and detection engineering.

What you'll do

• Design, implement, and maintain the Splunk infrastructure including upgrading Splunk as well as Cribl
• Utilize data management platforms and other tools to enable efficient routing, parsing, and filtering of data
• Apply data engineering concepts such as data warehousing, real-time data processing, and data normalization to enhance the overall data infrastructure
• Leverage SIEM and data management platforms to collect, analyze, and correlate logs
• Lead SIEM detection engineering function to develop and fine-tune correlation rules, alerts, and dashboards to detect and respond to threats

What you need

• 10–18 yrs of experience
• SIEM
• Splunk
• ISO 27001
• CEH
• CISSP
• Firewalls
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Python
• PowerShell
• Bash
• Terraform
• AWS
• Azure