Tower Lead - Security Investigations, SIEM

Experience: 12 to 15 years

Location: Banglore, India

Skills: SIEM, Splunk, CrowdStrike Next Gen SIEM, log collection, threat detection, incident response, Soar, analytical skills, problem-solving skills, interpersonal skills, Certified Information Systems Security Qualified (CISSP), Certified Information Security Manager (CISM), Security Operations Center (SOC) Management Certification

Job Summary
We are seeking an experienced SIEM Engineer to join our team on a project basis. The successful candidate will be responsible for the migration of our log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM. This is a unique opportunity to work on a high-profile project, leveraging your expertise in Security Information and Event Management systems. The Tower Lead for Support & Operations plays a critical role in ensuring the efficient management of security event investigations and the implementation of technical solutions. This position is responsible for overseeing escalations, maintaining operational hygiene, and driving customer satisfaction while implementing organizational initiatives. The Tower Lead will lead efforts to optimize processes, enhance revenue, and promote innovative frameworks within the security operations landscape.

Key Responsibilities
12-15+ years of experience in designing, implementing, and managing SIEM systems (Splunk or similar)
In-depth knowledge of log collection, parsing, and analysis
Experience with threat detection and incident response methodologies
1. Ensure Timely Resolution Of Escalations By Leading Security Event Investigations Through Soar And Siem Tools, Adhering To Agreed Sla Norms To Deliver Optimal Outcomes.
2. Oversee The Generation Of Tower-Level Ee And En Revenue By Implementing Strategic Initiatives And Optimizing Resource Allocation Within The Support Operations.
3.



Validate And Oversee Operational Hygiene By Reviewing Reports And Ensuring That Services Are Delivered In Accordance With The Statement Of Work (Sow).
4. Promote Positive Customer Satisfaction By Developing And Implementing New Frameworks And Initiatives Aimed At Improving Service Delivery And Client Engagement.
5. Drive The Implementation Of The Profit Improvement Plan (Pip) By Identifying Automation Opportunities And Fostering Self-Driven Initiatives To Enhance Operational Efficiency.

Skill Requirements
Drive the technical aspects of migrating log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM
Design and implement a comprehensive migration plan, ensuring minimal disruption to existing security operations
Develop and maintain documentation on the new SIEM system, including configuration guides, user manuals, and troubleshooting procedures
Collaborate with cross-functional teams, including Security Operations, IT, and Compliance, to ensure a smooth transition and seamless integration with existing systems and processes
Identify and mitigate potential risks and issues during the migration process
Develop and execute comprehensive testing plans to validate the functionality and performance of the new SIEM system
Provide training and support to security analysts and engineers on the use and management of CrowdStrike Next Gen SIEM
1. Strong Knowledge Of Security Event Investigation Methodologies And Practices
2. Proficiency In Soar And Siem Technologies For Effective Incident Response
3. Solid Understanding Of Operational Management And Service Delivery Frameworks
4. Excellent Analytical And Problem-Solving Skills To Address Escalations And Improve Processes
5. Strong Communication And Interpersonal Skills To Foster Customer Relationships And Team Collaboration.

Other Requirements
Relevant Certifications
1. Optional But Valuable Certifications: Certified Information Systems Security Professional (Cissp), Certified Information Security Manager (Cism), And Security Operations Center (Soc) Management Certification

📌 Tower Lead Security Investigations, SIEM (Mumbai)
🏢 HCL Technologies
📍 Mumbai