SIEM Engineer

Your Role

• Operate, maintain, and continuously improve SOC platforms including Microsoft Sentinel, Microsoft Defender XDR, SOAR, security data lakes, telemetry pipelines, threat intelligence platforms, OT/NSM monitoring solutions, and email security platforms.
• Manage Microsoft Sentinel/XDR workspaces, connectors, analytics rule deployment mechanisms, workbooks, watchlists, and platform configurations to ensure reliable security operations.
• Maintain telemetry ingestion and data processing components including Windows Event Forwarding, syslog infrastructure, Azure Monitor Agent, Azure Event Hub, Logstash/Cribl-style pipelines, and data routing or transformation services.
• Support SOAR platforms, automation workflows, integrations, playbooks, operational queues, CI/CD deployment pipelines, and infrastructure-as-code processes while ensuring platform stability and scalability.
• Monitor platform health, troubleshoot ingestion, alerting, automation, access, performance, and reporting issues, while supporting detection engineering, data onboarding initiatives, compliance requirements, upgrades, patching, and on-call platform operations.

Your Profile

• 5+ years of experience in SIEM, security platform engineering, security operations, cloud infrastructure, or DevOps environments with strong troubleshooting and operational support expertise.
• Strong hands-on experience with SIEM platforms, preferably Microsoft Sentinel, including analytics rules, workspace administration, connector management, platform monitoring, and operational validation using KQL.
• Proven experience with log ingestion technologies including Syslog, Windows Event Forwarding, Azure Monitor Agent, Azure Event Hub, Logstash, Cribl, parsing, normalization, transformation, and telemetry pipeline management.
• Hands-on expertise with automation technologies such as Azure Logic Apps, Azure Functions, Python, PowerShell, Azure DevOps, Git, CI/CD pipelines, Infrastructure-as-Code, and Configuration-as-Code frameworks. . Strong understanding of Microsoft Defender technologies, Azure services, Azure Data Explorer, security data lakes, threat intelligence platforms, EDR/XDR solutions, email security, OT/NSM tooling, RBAC, API authentication, secrets management, compliance requirements, and enterprise security operations

What you will love working in Capgemini

• You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group.
• You will also get personalized career guidance from our leaders. You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges