Jio is inviting application for the role for the role JSAMP SIEM Admin

Requirements

Qualification and Work Experience

Qualification: BE / BTech / MCA

Work Experience: 6–12 Years

- 3+ years’ experience in ELK stack designing, development and management.
- 5+ years’ experience in cyber security domain.
- Well versed with relevancy scoring and analytical application of Elasticsearch with knowledge in data science.
- Robust experience in Grok filters, X-Pack, metrics, cluster management, pipelines.
- Relevant experience in Java and Linux (2–3 years).
- Exposure to architectural patterns of a large, high-scale applications, well-designed APIs.
- B.Tech (Computer Science / IT / Electronics / Communication Engineering) with minimum 60% marks.
- Desirable: CEH certification.

Key Responsibilities

- Development of correlation rules to detect cyber-attacks and insider threats.
- Development of trend analysis graphs (SIEM Dashboards) for critical events based on event correlation.
- Develop JSAMP / Azure Sentinel playbooks/workbooks and train SOC monitoring team on JSAMP (Wazuh) platform.




- Evaluate existing Elastic clusters, configuration parameters, indexing, search and query performance tuning, troubleshooting, security and administration.
- Focus on performance tuning and improving performance by understanding optimization and looking into several scenarios.
- JSAMP deployment on Cloud platforms and containers.
- Designs, implements, and configures Kibana visualizations as required.
- End-to-end ELK data ingestion, enrichment, transformation and visualization.

Competencies / Expertise Required

Functional & Behavioral

- Strong understanding of ELK stack designing, development and management.
- Strong analytical and problem-solving skills.
- Ability to work on SIEM, Wazuh and Elasticsearch platforms.
- Ability to understand and work with large-scale application architectures and well-designed APIs.
- Ability to work on new technologies and products related to cybersecurity and SIEM.

Key Skills

- ELK
- Kibana
- SIEM
- Wazuh
- Elasticsearch
- Linux

📌 JSAMP SIEM Admin (Mumbai)
🏢 JIO
📍 Mumbai