SIEM Engineering Specialist

Company: TCS
Skill : SIEM Engineering Specialist
Experience: 6 to 10 years
Location : Chennai

Job Description

• Design and maintain SIEM architecture across XSIAM, Sentinel and related log management platforms.
• Lead log source onboarding, parser development, field mapping, normalization, enrichment and data validation.
• Create and maintain correlation rules, detection use cases, dashboards and compliance reporting content.
• Define log source standards, naming conventions, parsing requirements, retention strategy and ingestion control.
• Monitor SIEM platform health, ingestion latency, EPS/GB volume, license utilization, parser errors and failed data sources.
• Align detection coverage to MITRE ATT&CK, threat intelligence requirements, regulatory controls and business-critical assets.
• Manage change control, testing, content promotion, rollback and documentation for SIEM engineering releases.
• Mentor SOC analysts on query development, log interpretation and investigation workflows.

Required Technical Skills

• SIEM architecture, data onboarding, parsing, normalization and correlation engineering.
• Expertise in XSIAM, Microsoft Sentinel, KQL, XQL and log source troubleshooting.
• Cloud, endpoint, identity, network, email, web proxy and firewall telemetry understanding.
• Detection engineering, MITRE ATT&CK mapping and false-positive reduction.
• Scripting with Python or PowerShell, REST API integration and automation support.