No. Of Positions : 1
Location : Ahmedabad
Experience : 4+ Years

Required qualification:

- Deploy, configure, and optimize SIEM platforms (PAN XSIAM, CrowdStrike Falcon, Splunk, Elastic Security, or IBM QRadar) to improve threat detection and reduce false positives.
- Investigate security incidents, perform threat hunting, and analyze alerts using the MITRE ATT&CK; framework.
- Develop detection rules, correlation logic, dashboards, and onboard log sources across endpoint, network, and cloud environments.
- Collaborate with internal teams and customers to identify security gaps, recommend remediation, and enhance overall security posture.
- Prepare technical reports, incident summaries, and security recommendations for both technical and business stakeholders.

Job Roles and Responsibility:

- 3 years of experience in Security Engineering, SOC Operations, Incident Response,



or Cybersecurity Consulting.
- Hands-on experience with SIEM platforms (PAN XSIAM, Splunk, Elastic Security, IBM QRadar, or CrowdStrike Falcon) and EDR solutions (CrowdStrike, Microsoft Defender, SentinelOne, or Carbon Black).
- Robust understanding of log analysis, network security, threat detection, incident response, MITRE ATT&CK;, and security monitoring.
- Experience with log analysis, detection rule creation, query writing, alert triage, and investigation across endpoint, firewall, authentication, and DNS logs.
- Knowledge of cloud security (AWS/Azure/GCP), Python/PowerShell/Bash scripting, SOAR platforms, and security frameworks (NIST, SOC 2, ISO 27001, CIS Controls) is an added advantage.

📌 Senior Financial Analyst (India)
🏢 Crest Data Systems
📍 India