Security Engineer III - IN
Core
L3 SIEM Engineer responsible for configuring, integrating, and monitoring security logs from cloud and on-premises environments using Microsoft Sentinel and Elastic Security to detect and respond to cyber threats.
Role type
Senior IC Security Operations Engineer (SIEM)
Builds
Proactive, threat-informed, risk-based, intelligence-driven security services for customers across multi-cloud workloads.
Domain
Cybersecurity, Cloud Security Operations, SIEM
Required skills
Microsoft Sentinel administration, Elastic Security (Elasticsearch, Kibana, Logstash, ECS), Cloud Security Monitoring (Azure, AWS, GCP), Endpoint Detection & Response (CrowdStrike, Defender for Endpoint), Network Security Integration (Palo Alto, Fortinet, Cisco), Web Application Firewall (Cloudflare, Akamai), Email Security (Proofpoint, Mimecast), Data Loss Prevention (Microsoft Purview, McAfee), SIEM Administration & Troubleshooting, Detection Engineering & Operations, Scripting (Python, Bash, PowerShell, Terraform), DevOps practices (CI/CD, Ansible, Jenkins)
Preferred skills
Splunk, IBM QRadar, Google SecOps (Chronicle), Security standards knowledge (NIST, ISO27001, CIS, OWASP, CCM)
Technologies
Microsoft Sentinel, Elastic Security, Elasticsearch, Kibana, Logstash, Azure, AWS, GCP, CrowdStrike, Microsoft Defender XDR, Palo Alto, Fortinet, Cisco, Cloudflare, Akamai, Proofpoint, Mimecast, Microsoft Purview, McAfee, Symantec, Terraform, Python, Bash, PowerShell, Ansible, Jenkins
Responsibilities
Configure and integrate data feeds into SIEM platforms, onboard and integrate on-premises and cloud resources, develop custom dashboards and reporting templates, create complex customer-specific use cases, advance platform administration via DevOps, coordinate with vendors for issue resolution, enhance playbooks and workflows, develop custom parsers for incident enrichment, maintain relationships with incident response and disaster recovery teams
Seniority
Senior, hands-on IC
