THIRUVANANTHAPURAM · FULLTIME
Senior SIEM Security Consultant
Ernst Young
Thiruvananthapuram · onsite · Posted 4d ago
Sourced from
Undisclosed3–6 yrsfulltimeThiruvananthapuram
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
The NG SIEM Senior role leads ingestion engineering, detection creation, and integrated case management and correlation workflows. This role partners with threat, cloud, and IR teams to enhance automation, reduce noise, and strengthen the SIEMSOAR ecosystem.
Key Responsibilities - Lead onboarding of strategic log sources via Cribl, cloud collectors, API pipelines.
- Build and optimize parsing, normalization, and enrichment logic.
- Create advanced detections mapped to MITRE ATT&CK using SPL/KQL/CQL/CQL-Advanced.
- Design and optimize correlation logic using Fusion/ML-based engines.
- Lead tuning and noise-reduction activities for Fusion correlation rules.
- Oversee case lifecycle management: triage workflows, enrichments, severity logic, and SLA tracking.
- Develop and maintain SOAR playbooks for automated enrichment, notifications, containment tasks.
- Integrate external systems (EDR, IAM, Email, Firewall) into SOAR workflows.
- Conduct root-cause analysis for ingestion and correlation gaps.
- Collaborate with Threat Intel and Detection teams for new use cases.
- Leverage AI assistants like Charlotte AI and Sentinel Copilot to optimize detection creation, accelerate query building, and reduce investigation time.
- Integrate Microsoft Sentinel with Copilot to enable AI-driven incident summarization, RCA assistance, KQL generation, and automated SOC workflows.
- Evaluate and implement AIpowered SOAR capabilities, including automated enrichment, clustering of similar alerts, and anomalybased playbook triggers.
- 36 years in SIEM engineering or SOC detection.
- Strong hands-on experience with Fusion Correlation Engine (CrowdStrike), Azure Sentinel Analytics, or Splunk ES Correlation Searches.
- Experience creating/maintaining SOAR playbooks (Fusion workflows, Sentinel Logic Apps, Splunk SOAR).
- Deep knowledge of case management workflows and alert lifecycle governance.
- Strong in ingestion engineering using Cribl Stream & Lake.
- Expertise in SPL, KQL, CQL query languages.
- Understanding of data models, schemas, threat modelling.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Automationai assistantsaws iamLogic Appsclusteringcase managementcorrelationcopilotAzure SentinelSentinelparsingAnalyticsdata modelsCrowdstrikeCapital MarketscloudOnboardingFirewallMicrosoft AzureArtificial IntelligenceMachine Learning
Section · Company
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on