An Indian multinational information technology (IT) consulting company headquartered in Noida, The company has offices in 52 countries and over 225,944 employees. The Client is a global IT services and consulting company that offers a wide range of services and products across various industries like IT Infrastructure Services, Cybersecurity Services, Cloud Services, Big Data and Analytics, Internet of Things (IoT) Solutions, Semiconductor Services and Enterprise Software Products.
About The Job:
- We are looking for a proactive SIEM Engineer to design, implement, and manage our detection and response capabilities using Google Security Operations / Palo Alto XSIAM.
- You will be responsible for onboarding log sources, writing detection rules, and ensuring our security telemetry provides full visibility across our hybrid-cloud infrastructure.
- While expertise in Google’s stack is a plus, we value solid fundamental SIEM logic and the ability to translate security use cases into actionable alerts.
Essential Job Functions:
- SIEM Implementation: Configure and maintain Google Security Operations (Chronicle) environments, including Feed Management and Log Parsing.
- Detection Engineering: Author and fine-tune detection rules using YARA-L (or equivalent languages like SPL/KQL) to identify sophisticated threats.
- Data Onboarding: Manage the ingestion of logs from diverse sources (Cloud, On-prem, EDR, Firewall) and ensure data normalization via Unified Data Model (UDM).
- Automation & SOAR: Work with Playbooks to automate repetitive response tasks and reduce "Mean Time to Respond" (MTTR).
- Threat Hunting: Conduct proactive searches for indicators of compromise (IoCs) that may have bypassed automated controls.
Qualifications:
- Experience: 3–7 Years
- Focus: Google Security Operations (Chronicle), Detection Engineering, and Log Management
- SIEM Expertise: Proven experience with at least one major SIEM plat