SIEM Engineer - Trantorinc
- Trantor
- 6 - 11 years
- Noida, Gurugram
- 10 months ago
- Email to a friend
- Report this job
Job Description
As a SIEM Engineer, you will be responsible for assisting with the log migration and detection strategy of our customers. You will ensure that all of the relevant log sources are onboarded and ingested into SOAR in accordance with industry best practices and customer requirements. You will then work to determine a suitable detection strategy, helping to protect customers from threats, by designing and implementing correlation rules
Job Role & Responsibilities
- Devise a comprehensive log ingestion strategy
- Create meticulous and effective correlation rules
- Fine-tune log sources and correlation rules to enhance system efficiency
- Contribute to the development of detection strategies based on industry best practices
- Articulate a step-by-step process to ensure the ingestion of high-quality log sources
- Monitor and optimize log sources for optimal performance
- Serve as the subject matter expert (SME) in SIEM and SOAR, correlation, and log source ingestion
- Leverage your in-depth knowledge of SIEM and SOAR and SOC practices to assess customer needs, provide tailored recommendations, and assist in the formulation of effective security strategies
- Produce technical documentation detailing SIEM and SOAR aspects of the engagement
- The candidate is expected to comply with the company s policies and procedures.
Required Skills
- 6+ years of experience in deploying and integrating (SIEM) to enterprise to large enterprise-level
- Deep expertise with load, transformation and correlation of sources such as Cloud, Endpoint, Firewall
- Coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities using (SIEM) platforms
- Architect-level individual with experience in SIEM (Splunk, Netwitness, QRadar, Arcsight etc. ). Candidates with QRadar experience will be preferred.
- Ability to perform Threat Hunting exercises from telemetry.
- Extensive experience in creating and developing correlation and detection rules, within a SIEM to support alerting capabilities.
- Strong Regular Expression skills.
- A proven ability to offer suggestions on detection strategy based on customer requirements.
- Knowledge of Security Analysis & Response a plus, including both endpoint, network & cloud-based environments.
- Strong technical skills in SIEM/SOAR tools and technologies
- Experience in developing and implementing security strategies
- Experience in conducting security incident response
- Ability to define and design security controls based on NIST, CIS, CSA and other standards
- Certifications such as CISSP, CISM, GIAC, SIEM Vendor Qualification would be a plus.
- Excellent communication and interpersonal skills
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: TrantorLocation(s): Noida, Gurugram+ View Contact
Keyskills: Cism Automation Event management SOC Agile SIEM Firewall Technical documentation
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Trantor
About TrantorFounded in 2009, Trantor is a leading software services company headquartered in Menlo Park, California. We deliver innovative technology solutions which enable our clients to achieve their business objectives holistically keeping the big picture in the front and center.Peop...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in