Track Lead - Security Investigations, SIEM

Experience: 8 to Not Available years

Location: Bengaluru, India

Skills: SIEM, Splunk, CrowdStrike Next Gen SIEM, Security Information and Event Management, Soar Technologies, log collection, parsing, analysis, threat detection, incident response methodologies, security event management, alerting, correlation, analytics, Certified Information Systems Security Qualified (CISSP), Security+ Certification

Job Summary
We are seeking an experienced SIEM Engineer to join our team on a project basis. The successful candidate will be responsible for the migration of our log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM. This is a unique opportunity to work on a high-profile project, leveraging your expertise in Security Information and Event Management systems. The Track Lead (Support & Operations) plays a pivotal role in managing security event investigations and implementing technical solutions within the organization. This position focuses on enhancing operational efficiencies, ensuring client satisfaction, and fostering a culture of continuous improvement and innovation among teams. The Track Lead is instrumental in aligning operational goals with organizational objectives while empowering teams to meet client SLAs effectively.

Key Responsibilities
Drive the technical aspects of migrating log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM
Design and implement a comprehensive migration plan, ensuring minimal disruption to existing security operations
Develop and maintain documentation on the current SIEM system, including configuration guides, user manuals, and troubleshooting procedures
Collaborate with cross-functional teams, including Security Operations, IT, and Compliance, to ensure a smooth transition and seamless integration with existing systems and processes
Identify and mitigate potential risks and issues during the migration process




Develop and execute comprehensive testing plans to validate the functionality and performance of the new SIEM system
Provide training and support to security analysts and engineers on the use and management of CrowdStrike Next Gen SIEM
• Implement And Optimize Soar Solutions To Automate Security Event Investigations, Ensuring Timely And Accurate Incident Response While Enhancing Overall Operational Efficiency.
• Develop And Maintain Comprehensive Reporting Systems Using Siem Tools To Provide Insights Into Security Incidents And Operational Performance, Facilitating Informed Decision-Making.
• Lead And Mentor The Support Team By Fostering Transparent Communication Of Project Goals And Encouraging The Adoption Of Best Practices In Security Operations.
• Collaborate With Clients To Thoroughly Understand Their Security Needs, Ensuring The Support Team Delivers Tailored Solutions That Exceed Client Expectations.
• Drive Innovation By Identifying Opportunities For Process Improvements And Implementing New Ideas That Enhance The Effectiveness Of Security Operations.

Skill Requirements
• Strong Proficiency In Security Event Investigation And Soar Technologies.
• In-Depth Knowledge Of Siem Tools And Their Application In Operational Environments.
• Excellent Problem-Solving Abilities And A Strong Understanding Of Client Relationship Management.
• Proven Leadership Skills With The Ability To Mentor And Empower Teams Effectively.

Other Requirements
8+ years of experience in designing, implementing, and managing SIEM systems (Splunk or similar)
In-depth knowledge of log collection, parsing, and analysis
Experience with threat detection and incident response methodologies
Strong understanding of security event management, including alerting, correlation, and analytics
Relevant certifications
• Optional But Valuable Certifications: Certified Information Systems Security Professional (Cissp), Security+ Certification, Or Any Relevant Soar Or Siem Certifications

📌 Track Lead Security Investigations, SIEM (Bengaluru)
🏢 HCL Technologies
📍 Bengaluru