SIEM & SecOps Engineer II

About the role

As a Security Operations Implementation Engineer, you will be playing a pivotal role in enabling Zeta in implementing and integrating SIEMs, detecting and responding to attacks at an early stage and make sure infrastructure and applications are secure. You will work with an amazing peer group that fuels this ambition.

What you'll do

• Design, develop, and maintain high-fidelity detection rules, correlation rules, alerts, and security use cases for newly onboarded and existing log sources
• Continuously tune detections to reduce false positives, improve detection fidelity, and expand detection coverage across the environment
• Develop security monitoring and detection content for AWS services, Kubernetes, microservices, Linux, macOS, databases, web applications, firewalls
• Onboard new security and application log sources by developing Logstash pipelines, custom parsers, Grok patterns, ingest processors, and enrichment workflows
• Analyze raw log formats, normalize events to a common schema, and enrich security telemetry to enable reliable detection and investigation

What you need

• 4–6 yrs of experience
• SIEM
• Incident response
• Linux
• Firewalls
• Splunk
• IAM
• B.Tech or B.E. or M.Tech

Good to have

• Cloud security
• ISO 27001
• AWS
• Elasticsearch
• Microservices
• CI/CD