SIEM Integrator
Saab India Technologies Private Limited · Bengaluru · onsite · Posted 29d ago
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Key Responsibilities
- Lead the design, deployment, and lifecycle management of SIEM integrations across on-prem, cloud, and hybrid environments.
- Define and prioritize the SIEM onboarding roadmap in collaboration with SOC leadership, IT, and application owners.
- Build, tune, and maintain correlation rules, parsers, use cases, and dashboards to improve detection coverage and reduce false positives.
- Ensure log source health, data quality, and pipeline reliability through monitoring, alerting, and periodic audits.
- Partner with detection engineering and SOC analysts to translate threat scenarios into actionable SIEM content.
- Own SIEM platform architecture decisions, including sizing, retention, licensing, and integration with SOAR and other security tools.
- Document integration standards, onboarding procedures, and use-case libraries; drive knowledge sharing across the team.
- Act as the primary escalation point for SIEM-related technical issues and outages.
Requirements
- 5+ years of hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel, Elastic, or similar).
- Proven experience integrating diverse log sources (network, endpoint, cloud, identity, application) into SIEM
- Strong understanding of log formats, parsing, normalization, and correlation rule development.
- Solid knowledge of networking, operating systems, and common enterprise security tools.
- Familiarity with scripting/automation (Python, PowerShell, or similar) for integration and data enrichment tasks.
- Understanding of the MITRE ATT&CK framework and how it maps to detection use cases.
- Strong communication skills and ability to work cross-functionally with SOC, IT, and engineering teams.
Nice to Have
- Experience with SOAR platforms and security automation/orchestration.
- Relevant certifications (e.g., Splunk Certified, Microsoft SC-200, GIAC/GCIA/GCDA).
- Experience in regulated environments requiring compliance-driven logging (SOX, PCI-DSS, ISO 27001).
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
data qualityAutomationEnterprise Securitydata enrichmentIso 27001DssauditscorrelationSentinelintegrationsEndpointComputer NetworksdeploymentcloudOnboardingCommunication SkillsArchitecturecompliance
About Saab India Technologies
Saab India Technologies Private Limited
75
employees
New Delhi
headquarters
₹23.1L PA avg
Avg at Saab India Technologies
About
As a leading defence and security company, we offer solutions that range from the depths of the oceans to high in the sky, on land and in cyberspace, to keep people and society safe. Empowered by our 22,000 talented people, we constantly push the boundaries of technology to create a safer, more sustainable and more equitable world. We design, manufacture and maintain advanced systems in aeronautics, weapons, command and control, sensors and underwater systems.
Employee ratings
3 reviews
5.0/ 5
Culture
4.7
Career growth
4.0
Work-life
4.7
Employees rate it well for
Overall Company50Company Culture49
Find them on