Security Engineer | SIEM | Mumbai

JD:

• 2+ Years of Industry experience, daily hands-on activities of the incident response and analysis.
• Must be good in managing Incident Responses.
• Good understanding of cybersecurity concepts, threat types, and attack vectors.
• Familiarity with SIEM tools (e.g., Splunk, QRadar), firewalls, and endpoint protection.
• Knowledge of TCP/IP, DNS, HTTP, and other networking protocols.
• Strong analytical and communication skills.
• Willingness to work in rotational shifts, including nights and weekends.
• Monitor security alerts and events from SIEM, IDS/IPS, antivirus, and other security tools.
• Perform initial triage of security incidents to assess severity and potential impact.
• Escalate confirmed incidents to L2 analysts with relevant context and evidence.
• Assist in gathering logs, screenshots, and other artifacts for incident documentation.
• Follow predefined playbooks and standard operating procedures (SOPs) for incident handling.
• Maintain accurate and timely records of all incident-related activities.
• Support evidence collection and ensure logs are preserved for further analysis.
• Coordinate with internal IT teams for basic containment actions (e.g., isolating endpoints).
• Participate in shift-based operations to ensure 24x7 monitoring coverage.Role & responsibilities

Preferred candidate profile

• 2+ Years of Industry experience, daily hands-on activities of the incident response and analysis.
• Must be good in managing Incident Responses.
• Good understanding of cybersecurity concepts, threat types, and attack vectors.
• Familiarity with SIEM tools (e.g., Splunk, QRadar), firewalls, and endpoint protection.

Please fill below forms if you are interested for the same

https://forms.cloud.microsoft/r/v0S2BXfWim