Demonstrable hands-on experience engineering and administering Palo Alto Cortex XSIAM or XSOAR as a primary SIEM/SOAR platform in a production SOC workplace.
Proven experience building and maintaining CrowdStrike Falcon integrations, including sensor management, data connector configuration and policy administration. • Practical experience configuring AWS security logging services including GuardDuty, Security Hub, CloudTrail and VPC Flow Logs, and forwarding these into a SIEM.
Demonstrable experience with Azure cloud security logging including Entra ID audit logs, Microsoft Defender for Cloud and Diagnostic Settings.
Experience working with GCP security logging services including Cloud Audit Logs and Security Command Centre.
Solid working knowledge of Microsoft Entra ID (Azure AD) and Microsoft 365 security integrations, including Conditional Access, sign-in risk policies and M365 Defender connectors.
Experience writing SIEM detection logic, correlation rules and SOAR playbooks in a production capacity.




Robust understanding of log formats, parsing and normalisation (JSON, CEF, Syslog) across diverse source types.
Familiarity with MITRE ATT&CK; as a framework for detection engineering and threat coverage mapping.
Ability to produce transparent, accurate technical documentation aligned to change management and audit requirements.

6.2 Desirable Requirements
Relevant vendor certifications: Palo Alto XSOAR/XSIAM Engineer, CrowdStrike CCFA/CCFH, AWS Security Specialty, Microsoft SC-200 (Security Operations Analyst). • Exposure to scripting for automation (Python, PowerShell) in a security engineering context.
Familiarity with SOC metrics, SLA reporting and KPI/KRI frameworks.
Experience operating within an ITSM environment (Jira, ServiceNow) including change management and incident ticketing workflows.

📌 Soc & Cloud Operations Tamil Nadu
🏢 Talodyn Networks
📍 Tamil Nadu