Freelance Senior Cybersecurity Engineer – SIEM, SOC, Splunk & Vulnerability Management

Job Type: Freelance / Independent Contractor

Work Arrangement: Remote

Engagement Type: Project-Based / Flexible Hours

Experience Required: 10 Years of Relevant Experience

Job Overview

We are seeking an experienced Freelance Senior Cybersecurity Engineer with at least 10 years of relevant skilled experience in enterprise cybersecurity, security operations, threat detection, vulnerability management, incident response, and security engineering.

The ideal candidate will have strong hands-on experience with enterprise security tools, SIEM/SOC operations, security monitoring, threat analysis, endpoint security, risk management, and cybersecurity frameworks such as NIST and ISO 27001.

This opportunity is intended for experienced cybersecurity professionals who can independently provide technical support, troubleshoot complex security issues, assist with security implementations, and deliver project-based technical assignments.

Key Responsibilities

- Design, implement, configure, and maintain enterprise cybersecurity solutions.
- Support Security Operations Center (SOC) activities, including security monitoring, alert triage, threat detection, and incident investigation.
- Administer and optimize SIEM platforms, develop detection rules, create dashboards, and perform log correlation and analysis.
- Perform threat hunting, incident response, root-cause analysis, and security event investigations.
- Manage vulnerability assessment, risk-based prioritization, remediation tracking, and validation.
- Support endpoint detection and response (EDR), extended detection and response (XDR), network security, and cloud security solutions.
- Configure and maintain security policies, firewall rules, intrusion prevention systems, and security controls.
- Develop and tune security detection use cases aligned with MITRE ATT&CK; and emerging threat patterns.
- Assist with security assessments, risk analysis, security hardening, and remediation initiatives.
- Implement and assess security controls aligned with NIST, ISO 27001, CIS Controls, SOC 2, PCI DSS, HIPAA, and other applicable standards.
- Support security automation, orchestration, and incident response workflows using SOAR platforms.
- Monitor security posture, investigate suspicious activities, and recommend improvements to reduce security risks.
- Prepare security assessment reports,



incident documentation, remediation plans, and compliance evidence.
- Collaborate remotely with technical teams and stakeholders to complete assigned project deliverables within agreed timelines.

Key Cybersecurity Tools & Technologies

1. SIEM & Security Analytics

- Splunk Enterprise Security (Splunk ES)
- Microsoft Sentinel
- IBM QRadar
- Google Security Operations
- Elastic Security
- Exabeam
- Securonix

2. SOC, SOAR & Security Automation

- Splunk SOAR
- Palo Alto Cortex XSOAR
- Microsoft Sentinel automation and playbooks
- IBM QRadar SOAR
- Security alert triage, correlation rules, detection engineering, and incident response automation

3. Vulnerability Management

- Tenable / Nessus
- Qualys VMDR
- Rapid7 InsightVM / Nexpose
- Microsoft Defender Vulnerability Management
- Vulnerability scanning, risk-based remediation, exposure assessment, and compliance reporting

4. EDR, XDR & Endpoint Security

- CrowdStrike Falcon
- Microsoft Defender for Endpoint
- SentinelOne
- Cortex XDR
- VMware Carbon Black
- Trend Micro Vision One

5. Network Security & Firewalls

- Palo Alto Networks / Panorama
- Fortinet FortiGate / FortiManager
- Check Point
- Cisco Secure Firewall
- IDS/IPS, VPN security, network traffic analysis, and firewall policy management

6. Threat Intelligence & Incident Response

- MITRE ATT&CK;
- YARA and Sigma rules
- Threat hunting and detection engineering
- Malware and phishing investigation
- Threat intelligence integration and digital forensics
- Incident response and security event analysis

7. Governance, Risk & Compliance (GRC)

- NIST Cybersecurity Framework (CSF)
- NIST SP 800-53 and NIST SP 800-171
- ISO/IEC 27001
- CIS Critical Security Controls
- SOC 2
- PCI DSS
- HIPAA security requirements
- Risk assessments, control validation, audit evidence, and remediation tracking

8. Cloud Security

- AWS Security Hub and GuardDuty
- Microsoft Defender for Cloud
- Google Security Command Center
- Cloud security posture management (CSPM)
- Cloud workload protection, identity security, and cloud threat detection





Required Qualifications
- Minimum of 10 years of relevant professional experience in cybersecurity engineering, security operations, security infrastructure, or related disciplines.
- Strong hands-on experience with enterprise security technologies and security monitoring platforms.
- Proven experience with at least one major SIEM platform, such as Splunk, Microsoft Sentinel, or IBM QRadar.
- Practical knowledge of SOC operations, incident response, threat detection, and security investigations.
- Experience with vulnerability management tools and remediation processes.
- Strong understanding of network security, endpoint security, identity security, and cloud security principles.
- Working knowledge of NIST frameworks, ISO 27001, CIS Controls, and relevant compliance requirements.
- Experience with security automation, detection engineering, or SOAR platforms is an advantage.
- Excellent analytical, troubleshooting, documentation, and communication skills.
- Ability to work independently and deliver high-quality technical outcomes within agreed deadlines.

Preferred Certifications

Relevant certifications are an advantage but are not mandatory:

- CISSP
- CISM
- CompTIA Security or CySA
- Certified Ethical Hacker (CEH)
- GIAC certifications, such as GCIH, GCIA, or GSEC
- Splunk security certifications
- Microsoft security certifications
- Palo Alto Networks or CrowdStrike security certifications

Compensation & Engagement

Compensation will be based on experience, technical specialization, project scope, availability, and mutually agreed hourly or project-based rates.

Engagement duration and workload will depend on project requirements and client needs.

How to Apply

Interested candidates should submit an updated resume along with the following details:

- Total years of experience and cybersecurity-specific experience
- Primary cybersecurity specialization
- SIEM, SOC, vulnerability management, and security tools expertise
- Recent project experience and key responsibilities
- Relevant certifications, if any
- Current availability
- Expected hourly rate or project-based compensation

We welcome experienced cybersecurity professionals interested in flexible, remote freelance engagements and enterprise-level security projects.

Pay: ₹5,000.00 - ₹10,000.00 per week

Benefits

- Flexible schedule

Work Location: Remote

📌 Freelance Senior Cybersecurity Engineer – SIEM, SOC, Splunk & Vulnerability Management (India)
🏢 Egon Solutions
📍 India