Location: Vadodara, Gujarat

Work Mode: Full-Time | Work from Office

Qualifications:

Bachelor's degree in computer science, IT, Cybersecurity, Electronics, or related field

Relevant cybersecurity certifications are an advantage:

- Splunk Certified User / Admin
- Microsoft SC-200
- IBM QRadar Certifications
- CEH / Security+ / CySA+
- Any SIEM-related certifications

Experience: 2 - 5 years of experience in SIEM/SOAR Implementation (mandatory)

About the Role:

At iFalcon Consultancy Services we help enterprises solve complex IT infrastructure and cybersecurity challenges through practical, outcome-driven solutions across networking, cloud, and security domains.

We are hiring a SIEM Engineer (Splunk/IBM Qradar) who will be responsible for implementing and deploying SIEM platforms. The candidate should have hands-on experience with at least any 2 SIEM/SOAR platforms and should understand the architecture.

Key Responsibilities:

- Own the end-to-end technical delivery of SIEM/SOAR, including architecture, design, implementation, testing, and operational handover.
- Lead implementation of Splunk/IBM QRadar platform capabilities, including data onboarding, index strategy, field mapping, dashboards, alerting, and operational controls.
- Define log source onboarding patterns for infrastructure, applications, security tools, cloud platforms, network devices, and identity platforms.
- Define SIEM/SOAR architecture across log collection, aggregation, ingestion, parsing, enrichment, detection engineering, alerting, case management, and automation.
- Lead development of detection use cases, correlation rules, threat hunting capabilities, and SOC monitoring content aligned to priority threats and operational requirements.




- Work with SOAR platforms for automation and playbook execution.
- Provide technical leadership to SIEM developers, testers, and operational teams.
- Review and approve architecture artefacts, detailed designs, onboarding standards, use case documentation, playbooks, test evidence, and operational runbooks.

Required Product Experience: (Any 2 - 4 of the following domains)

SIEM Platforms: Splunk, IBM QRadar, FortiSIEM, Palo-Alto XSIEM, Microsoft Sentinel, ArcSight

SOAR Platforms: Splunk SOAR, Palo-Alto Cortex XSOAR, FortiSOAR, Microsoft Sentinel

Technical Skills Required:

- Demonstrated experience in SIEM engineering, security architecture, or security platform delivery roles.
- Proven experience leading enterprise SIEM/SOAR implementations.
- Deep understanding of log aggregation, ingestion pipelines, parsing, normalisation, enrichment, correlation, alerting, dashboards, and operational monitoring.
- Solid experience designing detection use cases, SOC workflows, SOAR playbooks, threat intelligence integration, and threat hunting capabilities.

Good to Have (Not Mandatory):

- Basic scripting knowledge: Python, PowerShell, Bash

Soft Skills Required:

- Good client communication and documentation skills.
- Willingness to travel client site for deployment, if required.

Why Join Us?

- Opportunity to work on enterprise-level cybersecurity projects.
- Exposure to global customers and advanced security technologies.
- Hands-on learning in SIEM, SOAR, Cloud Security, and IR operations.
- Career growth opportunities in cybersecurity engineering and consulting.
- Collaborative and technically driven work environment.
- Opportunity to work with multiple enterprise security products and vendors.

📌 Cybersecurity Engineer (SIEM) (Vadodara)
🏢 iFalcon Consultancy Services
📍 Vadodara