We are hiring for SIEM Admin role for Hyderabad / Mumbai location. Experience: 5+ Years JD: This is a core technical IC role which requires candidate to be hands on and ability to deliver the below tasks independently. Ownership of SIEM platform in terms of administration and management ( should be currently performing this role) Ensuring platform and service uptime Efficient management of the platform to ensure proper performance. Upgrade and updates (KBs)/ patch as per OEM Platform capacity management Administration and management of underlying Infrastructure Layer Log Source Integration to include development of custom parsers for non-supported log sources Integration with other platforms like Threat Intelligence Configuration of SOAR plugins Advanced troubleshooting of the SIEM platform Problem management. Working closely with OEM Configuration of rules reports and dashboards based on inputs from monitoring team. Documentation of RCAs for major incidents Other skills required Ability to interact and manage customer stakeholders in the context of platform management. Good team working skills and communication. Technology and skills SIEM: ArcSight SIEM platforms SOAR: SIEM native of any third party Threat Intelligence and Brand Monitoring (Cyble, IzooLogic) ISTM tools - Everest is preferred or any other industry leading product. Scripting: Regex is mandatory. OS: Windows and Linux (intermediate skills) Good knowledge of security domain is mandatory Working Window Should be flexible to work in shifts and on demand for any weekend activities If interested please forward your resume to hidden_email,
Employement Category:
Employement Type: Full timeIndustry: IT Services & ConsultingRole Category: Not SpecifiedFunctional Area: Not SpecifiedRole/Responsibilies: Hiring for SIEM Admin ( LogRhythm) Hyderabad