Key Responsibilities:

Security Tool Management & Administration

- Deploy, configure, and maintain security tools such as Splunk SIEM, EDR/XDR, SOAR, Zscaler, VPNs, firewalls, and OT/ICS security tools.
- Ensure continuous operation and optimization of security products.
- Perform routine updates, patching, and tuning of tools for best performance and integration.

Threat Monitoring & Incident Handling

- Monitor logs and alerts from SIEM, EDR, and network security tools to detect threats and anomalies.
- Support incident investigations by correlating logs and analyzing events.
- Collaborate with SOC and IR teams to escalate and mitigate security incidents.

Automation & SOAR Integration

- Develop and configure SOAR playbooks to automate common security workflows.
- Create scripts using Python, PowerShell, or APIs for automation and system integration.

Vulnerability Remediation & Risk Reduction

- Analyze vulnerabilities and assist IT and DevSecOps teams in remediation.
- Track and report patch compliance for all security-related tools and platforms.

Compliance & Reporting

- Build and maintain dashboards and reports using SIEM and security platforms.
- Support compliance with frameworks such as NIST, ISO 27001, CIS Controls, SOC 2, and PCI DSS.




- Assist with internal audits and regulatory assessments involving security infrastructure.

OT & Network Security Operations

- Ensure secure configuration and segmentation of OT/ICS networks.
- Work with network teams on firewall policies, VPNs, and Zscaler deployments.
- Manage and support cloud security tools including CSPM and CNAPP solutions.

Required Qualifications & Skills:

Technical Skills:

- Hands-on experience with security tools: Splunk SIEM, Microsoft Defender, CrowdStrike EDR, Cyware SOAR, Zscaler, Palo Alto firewalls, DLP, CSPM, CNAPP.
- Solid understanding of network security protocols, IDS/IPS, and firewall configurations.
- Familiarity with security frameworks like MITRE ATT&CK;, NIST CSF, Zero Trust.
- Basic scripting ability with Python, PowerShell, or Bash.

Experience:

- 4–6 years of experience in security operations, tool administration, or product management.
- Prior involvement in SOC, security engineering, and vulnerability management is preferred.

Certifications (Preferred):

- Splunk Certified Administrator
- Microsoft Security Certifications (e.g., SC-200, SC-300)
- CISA, CISM, GIAC (GCIH, GCIA, GCFA), CEH, CCSP, CCSK, or similar

📌 Security Product Operations specialist (Bengaluru)
🏢 Haleon
📍 Bengaluru