- SIEM Operations - Support day-to-day SIEM monitoring, administration, health checks, and troubleshooting.

- Log Source Onboarding - Configure and onboard Windows, Linux, Firewall, EDR, WAF, Cloud, VPN, and other security log sources.

- Log Collection Troubleshooting - Troubleshoot missing logs, parsing issues, connectivity problems, ingestion delays, and data-quality issues.

- Detection Rule Development - Develop and maintain SIEM correlation rules and detection use cases based on security threats and attack scenarios.

- Detection Tuning - Analyze false positives and optimize detection rules to improve detection accuracy and reduce alert noise.

- MITRE ATTCK Mapping - Map detection use cases to relevant MITRE ATTCK tactics, techniques, and sub-techniques.





- Threat Hunting - Perform basic threat hunting using SIEM queries to identify suspicious activities and potential security threats.

- Security Event Analysis - Analyze Windows, Linux, network, endpoint, authentication, and cloud security events to identify malicious behavior.

- SIEM Query Scripting - Develop queries using platforms such as KQL, SPL, or LogRhythm and use basic Python, PowerShell, or Bash for automation and analysis.

- Detection Improvement Documentation - Identify detection gaps, support current use-case development, validate detections, and maintain detection engineering and SIEM documentation.

📌 Engineer- Platform Engineering (Chennai)
🏢 Tata Communications
📍 Chennai