Information Security Engineer - SIEM

sampoorna consultants

Bengaluru, India

2-6 Years

Save

Posted 2 days ago
Be among the first 10 applicants

Early Applicant

Job Description

Key Responsibilities

Monitor and respond to security incidents, alerts, and threats across the organization.
Conduct vulnerability assessments, risk analysis, and security audits.
Implement and maintain security tools such as firewalls, antivirus, SIEM, IDS/IPS, and endpoint protection solutions.
Develop, review, and enforce information security policies, standards, and procedures.
Ensure compliance with security frameworks and regulations such as ISO 27001, GDPR, SOC 2, or PCI-DSS.
Perform security assessments for applications, infrastructure, and cloud environments.
Collaborate with IT and business teams to identify and mitigate security risks.
Support incident response activities including investigation, containment, recovery, and reporting.
Conduct user awareness and cybersecurity training programs.
Maintain documentation related to security controls, incidents, and audit findings.
Stay updated with emerging cybersecurity threats, technologies, and best Skills & Qualifications :
Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field.
2 to 6 years of experience in information security or cybersecurity roles.
Strong understanding of network security, endpoint security, cloud security, and risk management.
Experience with security monitoring and incident management tools.
Knowledge of operating systems, networking concepts, and security protocols.
Familiarity with vulnerability management and penetration testing concepts.
Understanding of compliance and governance standards.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent communication and documentation Certifications :
CEH (Certified Ethical Hacker)
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
CompTIA Security+
ISO 27001 Lead Technical Skills :
SIEM tools (Splunk, QRadar, Sentinel, etc.)
Firewall and VPN management
Cloud platforms such as AWS, Azure, or GCP
Endpoint Detection & Response (EDR) tools
Identity and Access Management (IAM)
Basic scripting knowledge (Python, PowerShell, Bash)