Sr SIEM Engineer

About the role

The Senior SIEM Engineer is a senior technical contributor accountable for SIEM delivery and detection content engineering across the enterprise. You will design, build, test, deploy, tune, and continuously improve detections that draw on SIEM, Network Detection and Response (NDR), Endpoint Detection and Response (EDR), cloud, identity, network, endpoint, application, and email telemetry.

What you'll do

• Drive the design, implementation, maintenance, and optimization of the enterprise SIEM platform
• Define and maintain the SIEM delivery roadmap in line with Global Security Organization strategy and business priorities
• Onboard security-relevant log sources with appropriate parsing, normalization, enrichment, correlation, retention, and searchability
• Monitor and improve platform availability, performance, scalability, capacity
• Keep SIEM components on supported versions and ensure relevant patches and updates are applied

What you need

• 4–8 years in cybersecurity
• SIEM
• Incident response
• EDR
• DLP
• Firewalls
• Python
• B.Tech or B.E.

Good to have

• ETL
• Technical writing
• SQL
• TCP/IP
• IPR
• Machine learning