Engineer- MDR (SIEM) | On-Site, Bangalore
On-siteBengaluru, Karnataka, India
Job Summary
Onboard and maintain SIEM environments for Optiv MSS clients, serving as a primary responder for Managed Security customer systems. Create procedures and implement processes across internal and client environments while configuring SIEM/MDR software and appliances in large enterprise and Government settings. Advise on best practices to technical and non-technical personnel, perform knowledge transfers, and develop security content and reporting. Work with Senior Engineers and Solution Architects to complete critical services, provide remote consulting via interactive client sessions, and mentor junior engineers. Rotate between days, mids, and nights for 24/7 support with a 3-day on-site requirement in Bangalore. Requires 3+ years of experience, LogRhythm proficiency, and ability to work over 40 hours weekly.
Required Qualifications
- 3+ years professional experience working in a technical team environment
- 2+ years professional experience maintaining SIEM or infrastructure systems in the Information Security field
- College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment
- Experience with LogRhythm SIEM
- Understanding of network architecture and implementation
- Experience working with Internal and client Ticketing and Knowledge Base Systems for Incident and Problem tracking as well as procedures
- General security knowledge (GIAC, CISSP, CCSE, CISA, HBSS, NSA, CEH, Cisco Security, Security +, or other security certifications)
- Training and experience in one or more non-SIEM network security products to include: Enterprise endpoint security products, Network components such as Firewalls and Proxies to include Palo Alto / Checkpoint / Juniper / McAfee / Cisco / Blue Coat / Imperva or other similar network security products
- CCNA, CCDA, CCSA, CCIE, CISSP, CEH, or MCSE
- Professional experience working with networks and network architecture
- Ability to participate in on-call support
- Ability to work greater than 40 hours per week as needed
- This position is required to be on-site at our Bangalore office 3 days per week
- This role requires shift flexibility, including the ability to rotate between days, mids, and nights
Desired Qualifications
- Prefer experience with additional SIEM/MDR security products such as: QRadar, Chronicle, Devo, Splunk, and infrastructure components such as proxies, firewalls, IDS/IPS, DLP, etc.
- Experience working with various SIEM security products such as: Exabeam, Chronicle, Devo, LogRhythm, QRadar, Splunk, and infrastructure components such as proxies, firewalls, IDS/IPS, DLP etc.
- An understanding of a wide array of server grade applications such as: DBMS, Exchange, DNS, SMTP, IIS, Apache, SharePoint, Active Directory, Identity Management, Patch Management, LDAP, SQL, and others
- Excellent time management, reporting, and communication skills
- Ability to participate in on-call support
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.