Security Engineer

Company Overview : Crest Data is the global leading provider of Data Analytics, Security, DevOps, Cloud Solutions, Software integrations, Analytics, and security-based technological services. With a clientele that includes several Fortune 500 corporations and some of the innovative Silicon Valley Startup

s .

Company URL: http://www.crestdata.

ai Job Loca tion - Ahmedab

ad About the Role : Security Engineer Experience : 2-5 Years We are looking for a Security Engineer or Consultant with 2-5 years of hands-on experience in threat detection and SIEM, SOAR, EDR implementation. You will work directly with security tooling and client environments to identify threats, improve detection coverage, and respond to incidents. This role suits someone who is technically grounded, comfortable working across multiple platforms, and capable of translating security findings into actionable outcomes

. Key Responsibilities:

• Deploy, configure, and tune SIEM platforms (PAN XSIAM, CrowdStrike Falcon, Splunk, Elastic Security, or IBM QRadar) to improve detection fidelity and reduce alert noise.
• Investigate security events and alerts through structured analysis, applying the MITRE ATT&CK framework to map adversary behavior and prioritize response.
• Develop and refine detection rules, correlation logic, and dashboards aligned to current threat intelligence and client risk profiles.
• Perform log source onboarding, normalization, and health monitoring to maintain visibility across endpoint, network, and cloud telemetry.
• Conduct threat hunting exercises using hypothesis-driven methodology to surface activity not caught by existing detections.
• Produce clear, technically accurate reports and briefings for both technical and non-technical stakeholders.
• Collaborate with client or internal teams to assess security posture gaps and recommend prioritized remediation actions.

Required Qualification:

• 2-4 years of professional experience in security engineering, security operations, or security consulting.
• Hands-on operational experience with at least one enterprise SIEM platform: PAN XSIAM, CrowdStrike Falcon, Splunk, Elastic Security, or IBM QRadar; including rule creation, query writing, and alert triage.
• Hands-on experience with at least one EDR platform (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black) including alert investigation and response actions.
• Solid working knowledge of core security domains: log analysis, network security fundamentals, threat detection methodology, and incident response lifecycle.
• Familiarity with the MITRE ATT&CK framework applied to detection engineering or incident investigation.
• Ability to read and interpret raw log data across common sources (firewall, endpoint, authentication, DNS).

Nice-to-Have Qualifications:

• Industry certifications such as CompTIA Security+, CEH, GCIA, GCED, GCIH, or equivalent
• Exposure to cloud security operations in AWS, Azure, or GCP environments, including cloud-native log sources and security services.
• Scripting or automation experience (Python, PowerShell, or Bash) applied to security workflows — alert enrichment, log parsing, or detection pipeline development.
• Experience with SOAR platforms or building playbooks for automated response.
• Familiarity with compliance frameworks such as NIST CSF, SOC 2, ISO 27001, or CIS Controls in an operational context.