22 Aug
|
We Search
|
Mumbai
Position Details: Role: SIEM Admin L2 – QRadar / Sentinel Req ID: 8603 Simplify ID: 1371 Location: Mumbai Experience: 3–6 Years Budget: 9–14 LPA (Inclusive of vendor margin) Open Positions: 1 Job Description: We are looking for a SIEM Administrator (L2) with hands-on experience in IBM QRadar or Microsoft Sentinel to support monitoring, maintenance, and optimization of SIEM platforms. Roles & Responsibilities: Monitor and manage SIEM platform health, performance, and availability Onboard, configure, and troubleshoot log sources (servers, firewalls, applications, cloud platforms) Handle log parsing, normalization, and ingestion issues Manage EPS, storage utilization, log forwarding, and retention policies Perform SIEM administration activities including upgrades, patching, tuning, and health checks Develop dashboards, reports, saved searches, and basic use cases/correlation rules Troubleshoot SIEM components (Event Collectors, Event Processors, WinCollect, connectors, APIs) Coordinate with infrastructure, network, and application teams Maintain SOPs, runbooks, and documentation
📌 SIEM Admin(1371,8603) (Mumbai)
🏢 We Search
📍 Mumbai