Urgent Requirement - SIEM Admin_Mumbai

Urgent Requirement -

Profile- SIEM

Location- Mumbai

Qualification

B.E. / B.Tech. / MCA / B. Sc (IT/Computer Science)

Experience: Minimum 2 Years as L2 SOC Analyst or SIEM Admin on Open-Source Tools such as ELK, Wazuh, TheHive, Cortex or Any Enterprise SOC

Certification

Professional certification (1 or more of the following) such as CSA/CEH/OSCP/CCSP or Any SIEM OEM Certification.

Skills:

• Familiarity with Linux administration, Docker, and automation scripting (Python/Bash).

• Knowledge of networking concepts and security devices, including networking protocols such as UDP, TCP/IP, DHCP, DNS, and security technologies such as firewalls, XDR, Antivirus, and IDS.

• Proficient on ELK Stack, Elastic Stack, or Wazuh handling and configuration.

• Experience managing Elasticsearch clusters, indices, shards, snapshots, and retention policies.

• SIEM Management: Installing, configuring, and maintaining SIEM components like event processors, flow processors, and consoles.

• IT/OT Knowledge (Crucial): Understanding of industrial control systems (ICS), SCADA protocols, and the unique security constraints of IT / OT environments.

• Log Source Integration (IT & OT): Integrating security solutions and applications to collect logs, developing custom parsers, and ensuring proper log normalization from diverse sources.

• Ability to Develop custom parsers, decoders, Wazuh rules, and detection content.

Can share resume at [email removed]