Project Role : Security Consulting Practitioner
Project Role Description : Provide enterprise-level advice to make organizations cyber resilient. Assist in navigating the complex landscape of cyber threats, ensuring robust digital asset protection while maintaining trust with stakeholders.
Must have skills : Security Information and Event Management (SIEM)
Positive to have skills : NA
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
As a Security Advisor, we are seeking a Data Source Onboarding Consultant to lead and support the integration of critical data sources into our security infrastructure. This role focuses on the technical and procedural aspects of onboarding logs and telemetry from various systems (on-premises, cloud, network, application, etc.) into our SIEM (CrowdStrike Next-Gen SIEM) and related platforms to ensure comprehensive visibility and threat detection.
Roles & Responsibilities:
Work with IT and business units to identify relevant data sources for security monitoring.
Onboard logs into the SIEM (CrowdStrike Next-Gen SIEM) using data connectors, Falcon Log Collector, and other supported ingestion methods.
Validate log ingestion, ensure proper parsing, and verify that logs align with established schemas (e.g., CEF, LEEF, Syslog, JSON).
Map log data to security use cases and detection rules and Configure log collection agents (e.g., Syslog, Fluentd).
Set up API integrations for cloud-native sources.
Customize and maintain parsers, log collectors, and transformation rules.
Maintain detailed documentation of onboarding procedures, configurations, and troubleshooting steps.
Conduct data quality reviews and log validation exercises.
Optimize data ingestion for performance and cost-effectiveness (e.g., reducing noisy logs, adjusting retention settings).
Tune and test correlation rules associated with newly onboarded data sources.
Work cross-functionally with SOC analysts,