Job Summary

We are seeking an experienced SIEM Engineer to join our team on a project basis. The /680successful candidate will be responsible for the migration of our log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM. This is a unique opportunity to work on a high-profile project, leveraging your expertise in Security Information and Event Management systems.

The Sr. Security Ops Administrator plays a critical role in enhancing the security posture of the organization through advanced technical support and incident management. This position is responsible for troubleshooting complex security issues, performing root cause analysis, and implementing effective solutions. The successful candidate will contribute to a positive customer experience and uphold high-quality standards in support operations.

Key Responsibilities

Drive the technical aspects of migrating log and threat detection capabilities from Splunk to CrowdStrike Next Gen SIEM rnrnDesign and implement a comprehensive migration plan, ensuring minimal disruption to existing security operations rnrnDevelop and maintain documentation on the current SIEM system, including configuration guides, user manuals, and troubleshooting procedures rnrnCollaborate with cross-functional teams, including Security Operations, IT, and Compliance, to ensure a smooth transition and seamless integration with existing systems and processes rnrnIdentify and mitigate potential risks and issues during the migration process rnrnDevelop and execute comprehensive testing plans to validate the functionality and performance of the new SIEM system rnrnProvide training and support to security analysts and engineers on the use and management of CrowdStrike Next Gen SIEM

1. Conduct Security Event Investigations Using Soar Tools,



Ensuring Adherence To Quality Standards And Regulatory Requirements While Providing Technical Solutions For Identified Threats.
2. Analyze Complex Incidents Escalated By Analysts, Performing Root Cause Analysis And Implementing Effective Resolutions To Mitigate Technical And Security Challenges.
3. Develop And Maintain Knowledge Base Articles And Training Materials, Providing Coaching And Mentorship To Junior Analysts To Enhance Team Capabilities.
4. Collaborate With Cross-Functional Support Teams To Resolve Complex Tickets Within Agreed Slas, Ensuring Seamless Security Operations And A Robust Security Posture.
5. Drive Positive Customer Experiences By Achieving First Call Resolution, Minimizing Rejected Resolutions, And Effectively Addressing And Mitigating Security Threats.

Skill Requirements

3+ years of experience in designing, implementing, and managing SIEM systems (Splunk or similar) rnrnIn-depth knowledge of log collection, parsing, and analysis rnrnExperience with threat detection and incident response methodologies

1. Strong Understanding Of Security Event Investigation Methodologies And Soar Tools.
2. Proficiency In Siem Solutions For Effective Incident Detection And Response.
3. Solid Knowledge Of Troubleshooting Techniques And Root Cause Analysis In A Security Context.
4. Experience In Developing Knowledge Base Content And Providing Training To Team Members.
5. Excellent Communication Skills To Collaborate Effectively With Stakeholders And Customers.

Must Have Skill

Security Event Investigation,Technical solution implementation-SIEM

Good to Have Skill

Other Requirements

3+ years of experience in designing, implementing, and managing SIEM systems (Splunk or similar) rnrnIn-depth knowledge of log collection, parsing, and analysis rnrnExperience with threat detection and incident response methodologies

1. Optional But Valuable Certifications: Certified Information Systems Security Professional (Cissp), Security+ Or Certified Information Security Manager (Cism)

📌 Senior Administrator - Security Investigations, SIEM (India)
🏢 HCLTech
📍 India