Role & responsibilities

ELK Security - AM

Exp - 5+ Yrs

Location - Mumbai

NP - Immediate to 30 days

JOB DESCRIPTION:

Deploy, configure, and maintain Elastic Stack components (Elasticsearch, Logstash, Kibana, Beats/Elastic Agent).

Administer Elastic Security (SIEM) including detection rules, alerts, dashboards, and cases.

Ensure platform availability, scalability, and performance optimization.

Monitor cluster performance (CPU, memory, disk, indexing/search latency).

Upgrade Elastic versions and manage cluster health (index lifecycle, shards, storage).

Onboard and normalize logs from various sources:

Develop and manage ingestion pipelines using Logstash and Ingest Pipelines.

Ensure proper parsing, enrichment, and normalization (ECS compliance).

Create/Tune detection rules, threshold rules, and correlation logic aligned with MITRE ATT&CK; framework.

Build dashboards and visualizations for threat monitoring.

Configure ILM (Index Lifecycle Management) and data retention policies.

📌 ELK Security - Assistant Manager (Mumbai)
🏢 Hiring Squad
📍 Mumbai