Cybersecurity Engineer (SIEM)

Location: Vadodara, Gujarat  

Work Mode: Full-Time | Work from Office

Qualifications:

Bachelor's degree in computer science, IT, Cybersecurity, Electronics, or related field 

Relevant cybersecurity certifications are an advantage: 

• Splunk Certified User / Admin 
• Microsoft SC-200 
• IBM QRadar Certifications 
• CEH / Security+ / CySA+ 
• Any SIEM-related certifications

Experience: 2 - 5 years of experience in SIEM/SOAR Implementation (mandatory)

About the Role:

At iFalcon Consultancy Services we help enterprises solve complex IT infrastructure and cybersecurity challenges through practical, outcome-driven solutions across networking, cloud, and security domains. 

We are hiring a SIEM Engineer (Splunk/IBM Qradar) who will be responsible for implementing and deploying SIEM platforms. The candidate should have hands-on experience with at least any 2 SIEM/SOAR platforms and should understand the architecture.

Key Responsibilities:

• Own the end-to-end technical delivery of SIEM/SOAR, including architecture, design, implementation, testing, and operational handover.
• Lead implementation of Splunk/IBM QRadar platform capabilities, including data onboarding, index strategy, field mapping, dashboards, alerting, and operational controls.
• Define log source onboarding patterns for infrastructure, applications, security tools, cloud platforms, network devices, and identity platforms.
• Define SIEM/SOAR architecture across log collection, aggregation, ingestion, parsing, enrichment, detection engineering, alerting, case management, and automation.
• Lead development of detection use cases, correlation rules, threat hunting capabilities, and SOC monitoring content aligned to priority threats and operational requirements.
• Work with SOAR platforms for automation and playbook execution.
• Provide technical leadership to SIEM developers, testers, and operational teams.
• Review and approve architecture artefacts, detailed designs, onboarding standards, use case documentation, playbooks, test evidence, and operational runbooks.

Required Product Experience: (Any 2 - 4 of the following domains)

SIEM Platforms: Splunk, IBM QRadar, FortiSIEM, Palo-Alto XSIEM, Microsoft Sentinel, ArcSight

SOAR Platforms: Splunk SOAR, Palo-Alto Cortex XSOAR, FortiSOAR, Microsoft Sentinel   

Technical Skills Required:

• Demonstrated experience in SIEM engineering, security architecture, or security platform delivery roles.
• Proven experience leading enterprise SIEM/SOAR implementations.
• Deep understanding of log aggregation, ingestion pipelines, parsing, normalisation, enrichment, correlation, alerting, dashboards, and operational monitoring.
• Strong experience designing detection use cases, SOC workflows, SOAR playbooks, threat intelligence integration, and threat hunting capabilities.

Good to Have (Not Mandatory):

• Basic scripting knowledge: Python, PowerShell, Bash  

Soft Skills Required: 

• Good client communication and documentation skills.
• Willingness to travel client site for deployment, if required.

Why Join Us

• Opportunity to work on enterprise-level cybersecurity projects. 
• Exposure to global customers and advanced security technologies. 
• Hands-on learning in SIEM, SOAR, Cloud Security, and IR operations. 
• Career growth opportunities in cybersecurity engineering and consulting. 
• Collaborative and technically driven work environment.
• Opportunity to work with multiple enterprise security products and vendors.