Cyber Security Engineering Team (SOAR)

Position Title :Cyber Security Engineering Team (SIEM) Total year of Experience :10+ Years Contract Duration :1 Year No of Positions :1 Work Location / Remote :Mumbai/ Remote Work Timings: 12 pm to 9Pm. JD: • Excellent communication skills • Good understanding of the offensive and defensive side of security • Expert level experience in deploying and managing SIEM platforms • Experience with Python/Powershell scripting for automation and custom integrations. • Strong team player - collaborates well with others to solve problems and actively incorporates input from various sources • In-depth knowledge of architecture, engineering, and operations of Splunk Cloud • Expertise in SOP/playbook creation and execution • Deep understanding of logging mechanisms of: o Windows o Linux o Mac OS o Networking technologies o Azure cloud technologies • Identify potential risks, threats, vulnerabilities and exploits through malware and other data analysis Experience: • 6-8 years of experience in Enterprise Cybersecurity or with a reputed Services / consulting firm offering Security Consulting, Implementation and Managed Security services. • Experience in SOAR (Security Orchestration Automation Response) platform is preferred • Strong hands-on experience with Cortex XSOAR (playbook development, integrations, content packs). • Proficiency in managing SIEM platforms. • Solid understanding of incident response workflows, security automation, and orchestration. • Familiarity with REST APIs, JSON, and integration patterns. • Knowledge of CI/CD practices and tools (Git, Jenkins, demisto-sdk). • Strong problem-solving skills and ability to work in a fast-paced environment. • Experience with Cribl LogStream preferred • Bachelor’s degree in Computer Science, Information Technology, Business, or Discipline involving Data Analytics or equivalent professional experience • Professional Certifications like GSEC, GCIA, CISSP, OSCP, etc., will be a plus