Urgent Requirement - SIEM Admin_Mumbai
Posted Updated
Description
Urgent Requirement -
Profile- SIEM
Location- Mumbai
Qualification
B.E. / B.Tech. / MCA / B. Sc (IT/Computer Science)
Experience: Minimum 2 Years as L2 SOC Analyst or SIEM Admin on Open-Source Tools such as ELK, Wazuh, TheHive, Cortex or Any Enterprise SOC
Certification
Professional certification (1 or more of the following) such as CSA/CEH/OSCP/CCSP or Any SIEM OEM Certification.
Skills:
- Familiarity with Linux administration, Docker, and automation scripting (Python/Bash).
- Knowledge of networking concepts and security devices, including networking protocols such as UDP, TCP/IP, DHCP, DNS, and security technologies such as firewalls, XDR, Antivirus, and IDS.
- Proficient on ELK Stack, Elastic Stack, or Wazuh handling and configuration.
- Experience managing Elasticsearch clusters, indices, shards, snapshots, and retention policies.
- SIEM Management: Installing, configuring, and maintaining SIEM components like event processors, flow processors, and consoles.
- IT/OT Knowledge (Crucial): Understanding of industrial control systems (ICS), SCADA protocols, and the unique security constraints of IT / OT environments.
- Log Source Integration (IT & OT): Integrating security solutions and applications to collect logs, developing custom parsers, and ensuring proper log normalization from diverse sources.
- Ability to Develop custom parsers, decoders, Wazuh rules, and detection content.
Can share resume at akriti.jaiswal@lrsservicces.in