Application support (SOC)

Job Descriptions:
Operations Support Engineer - R1
2-4 years of experience in security monitoring, alert triage, initial investigation and incident
classification across the SOC environment. The engineer will primarily operate OpenText ArcSight,
OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, perform first-level troubleshooting,
analyze security events and logs, execute defined SOAR playbooks/SOPs, manage incidents and
escalate complex issues to L2.
Skills: SIEM Monitoring . Security Event Analysis . Alert Triage . Log Analysis . Incident Classification .
SOAR Playbook Execution . IAM/PAM Monitoring . AD/LDAP . Syslog . Windows/Linux Logs . TCP/IP

• DNS . Basic Threat Analysis . IOC . MITRE ATT&CK . ITSM . Incident Escalation
  Skill Required: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ . OpenText PAM
  Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM, SOAR: Splunk SOAR, Palo
  Alto Cortex XSOAR, Swimlane, Turbine, IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft
  Entra, PAM: CyberArk, BeyondTrust, ARCON
  Location: Pune, Delhi, Bangalore and across Pan India.
  Education: Diploma / B. Tech
  Operations Support Engineer - R2
  4-6 years of experience advanced security event investigation, application/platform troubleshooting
  and incident analysis across the SOC environment. The senior engineer will provide advanced
  support for OpenText ArcSight, OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM,
  including log ingestion, parsing, correlation rules, SOAR playbooks, identity and privileged-access
  issues, integrations and security incidents.
  Skills: SIEM Troubleshooting . Log Ingestion . Parsing/Normalization . Correlation Rules . Detection
  Engineering . SOAR Playbooks . API Integration . Identity Lifecycle . PAM Troubleshooting .
  AD/LDAP . Threat Investigation . Threat Intelligence . MITRE ATT&CK . Linux/Windows . Network
  Security . Python/PowerShell . Advanced RCA
  Skills Preferred but not mandatory: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ
• OpenText PAM
  Alternate:
  SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
  SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
  IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
  PAM: CyberArk, BeyondTrust, ARCON
  Location: Pune, Delhi, Bangalore and across Pan India.
  Education: Diploma / B. Tech

Sr. Support Engineer - R3
8-12 years of experience in advanced technical support, architecture, engineering and complex RCA
across the SOC security platforms. The SME will provide expert-level support for OpenText ArcSight,
OpenText ArcSight SOAR, OpenText NetIQ and OpenText PAM, covering SIEM/SOAR/IDAM/PAM
architecture, detection engineering, correlation and parser development, threat hunting, security
automation, integrations, performance, HA/DR and major incident support. Strong expertise in the
identified alternate technologies is desirable to support technology transition, integration and future
platform modernization.
Skill Preferred but not mandatory: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ .
OpenText PAM
Alternate Skill: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech
Operations Support SME - R4
8-12 years of experience in providing expert guidance to L1-L3, lead critical RCA, coordinate OEM
escalations and ensure resolution of complex and recurring issues. The Resident engineer shall be at
least CISSP certified. Working Knowledge of HSM (Hardware Security Module)
Skill: Provide L4/OEM-level technical support for SOC platforms. Own resolution of critical and
recurring incidents escalated from L3 and perform deep-dive RCA and problem management.
Review SOC architecture and provide technical recommendations. Manage capacity, performance,
HA/DR and resilience issues. Maintain OEM support contracts/escalation channels and technical
contacts. Provide knowledge transfer to L1/L2/L3 teams. Maintain technical documentation, RCA
reports and known-error databases.
Skills: SIEM/SOAR/IDAM/PAM Architecture . Advanced RCA . Detection Engineering . Correlation
Development . Custom Parsers . Threat Hunting . Incident Response . Threat Intelligence . MITRE
ATT&CK . Security Automation . API Integration . Performance Tuning . HA/DR . Security
Engineering . Upgrade/Migration
Preferred but not mandatory: OpenText ArcSight . OpenText ArcSight SOAR . OpenText NetIQ .
OpenText PAM
Alternate: SIEM: IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSIAM
SOAR: Splunk SOAR, Palo Alto Cortex XSOAR, Swimlane, Turbine
IDAM: SailPoint, Saviynt, One Identity, Oracle IGA, Microsoft Entra
PAM: CyberArk, BeyondTrust, ARCON
Location: Pune, Delhi, Bangalore and across Pan India.
Education: Diploma / B. Tech