Senior Security Engineer

Job Description

We're searching for Senior Security Engineer to assist our 24×7 managed security operations center. This role is in Integration Department, responsible for the strategic, technical, and operational direction of the Integration Team.

Responsibilities

• IBM QRadar/ Sentinel / Datadog , Integration and content management, Event Collector deployment/upgradation.
• Troubleshooting skills at all layers of OSI Model.
• Onboard all standard devices to QRadar, such as Windows Security Events, Firewalls, Antivirus, Proxy etc.
• Onboard non-standard devices by researching the product and coordinating with different teams. Such as application onboarding or onboarding new security products.
• Developing and Deploying connectors and scripts for log collection for cloud-based solutions.
• Detailed validation of parsing and normalization of logs before handing over to SOC team will be day to day Job.
• Coordinate between customer and internal teams for issues related to log collection.
• The engineer needs to make sure that various team have completed their tasks, such as log validation, Log Source Not Reporting (LSNR Automation), Content Management before the Log Source is in production.
• Troubleshooting API based log sources.
• Documentation of integrations and versioning.
  
  

About SecurityHQ

SecurityHQ is a global cybersecurity company dedicated to helping organisations navigate an increasingly complex threat landscape. Our specialist teams design, engineer, and manage solutions that create clarity, strengthen security posture, and maximise the value of cybersecurity investments.We are committed to defending organisations against today's threats while helping them prepare for tomorrow's risks. Our solutions are tailored to each customer's unique environment, and our global teams provide around-the-clock protection, 365 days a year.

SecurityHQ: Engineering Cybersecurity by Design.

Job Reference Number

IN107

Essential Skills

• Prior SIEM administration and integration experience (Splunk , Datadog , Azure Sentinel)
• Network and Endpoint Device integration and administration.
• Knowledge of Device Integration : Log, Flows collection.
• Knowledge of Regular Expression and scripting language (ex: Bash , Python , PowerShell), API implementation and development.
• Knowledge of Parser creation and maintenance.
• Knowledge of Cloud technologies and implementation.
• Excellent in verbal and written communication.
• Hands on experience in Networking , Security Solutions and Endpoint Administration and operations.
  
  

Additional Desired Skills

• Excel, formulation.
• Documentation and presentation.
• Quick response on issues and mail with prioritization.
• Ready to work in 24×7 environment.
  
  

Education, Requirement & Experience

• BE/B.Tech, BCA
• Experience Level: 3+Years