L3 SOC, SIEM Tools Expert _Gurgaon_Onsite

Job Title: SIEM Implementation Specialist

Job Summary

Seeking an experienced SIEM Implementation Specialist with strong hands-on expertise in SIEM architecture, deployment, configuration, integration, and optimization. The role focuses on SIEM engineering and implementation rather than SOC monitoring and operations.

Mandatory Skills

• Hands-on experience in SIEM architecture, deployment, and configuration.
• Expertise in SIEM use-case development and tuning.
• Experience with UEBA (User & Entity Behavior Analytics) implementation and management.
• Strong knowledge of log source onboarding, parsing, normalization, and integration.
• Hands-on experience in Playbook creation and automation.
• Experience managing and optimizing enterprise SIEM platforms.
• Strong understanding of cybersecurity frameworks, log management, and event correlation.

Key Responsibilities

• Design, deploy, and manage SIEM solutions.
• Develop and optimize security use cases, correlation rules, and detection content.
• Integrate and onboard multiple log sources across enterprise environments.
• Implement and manage UEBA capabilities.
• Create and maintain automated response playbooks.
• Collaborate with security and infrastructure teams to enhance threat detection and visibility.

Preferred Certifications

• Splunk Certified Architect / Enterprise Security Certified Admin
• Microsoft SC-200 (Security Operations Analyst)
• IBM QRadar Certified Associate Administrator
• ArcSight ESM Certification
• GIAC (GCIA/GCIH) or relevant SIEM certifications

Experience & Qualification

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 8+ years of experience in SIEM Engineering, Implementation, and Security Analytics.

Must-Have Skills

✅ SIEM Architecture & Deployment

✅ SIEM Configuration & Integration

✅ Use-Case Development

✅ UEBA

✅ Playbook Creation & Automation

✅ Log Source Onboarding

✅ Security Analytics & Event Correlation

✅ SIEM Platform Administration (Splunk/QRadar/Sentinel/ArcSight)