L2 SIEM Administrator - LogRhythm

Job Summary:

We are looking for an experienced OpenText ArcSight SIEM / SOAR / UBA L2-L3 Engineer to manage and support security platforms in SOC/MSSP environment. The role involves day-to-day administration, troubleshooting, configuration and optimization of ArcSight platforms.

Key Responsibilities

• Administer and monitor OpenText ArcSight ESM/SIEM, SmartConnectors, SOAR and UBA/ArcSight Intelligence.
• Manage SIEM rules, filters, Active Lists, dashboards, reports and correlation use cases.
• Monitor EPS, event flow, connector health, system performance and log ingestion.
• Troubleshoot event collection, parsing, correlation and integration issues.
• Configure and troubleshoot ArcSight SmartConnectors and log sources.
• Manage and troubleshoot SOAR playbooks, integrations and automated workflows.
• Support UBA/Intelligence data ingestion, analytics and integration with SIEM.
• Perform L2/L3 troubleshooting, RCA and resolution of platform-related incidents.
• Support upgrades, patches, configuration changes and platform optimization.
• Coordinate with SOC, infrastructure, customer and OEM/OpenText support teams.
• Maintain technical documentation, incident records and RCA reports.

Required Skills

• 3–6 years of hands-on experience with OpenText ArcSight SIEM/ESM.
• Strong experience in ArcSight administration and troubleshooting.
• Hands-on experience with SmartConnectors, EPS, correlation rules, Active Lists and event flow.
• Working experience with ArcSight SOAR and UBA/ArcSight Intelligence.
• Good knowledge of Linux/Unix and networking fundamentals.
• Understanding of Syslog, CEF, TCP/IP, SSL/TLS and REST APIs.
• Strong analytical, troubleshooting and problem-solving skills.
• Experience in SOC/MSSP or managed security services environment preferred.
• OpenText/ArcSight certification will be an added advantage.

Candidate Profile

The candidate should be hands-on, technically strong and capable of independently handling L2/L3 production issues, platform administration, troubleshooting and escalations in a security operations environment.

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

About the role

You will create and validate the detection content that protects our customers: IDPS signatures, application control rules, and DLP rules. This is a hands-on role in our security lab, where you will generate real attack traffic, research vulnerabilities and applications, and make sure every rule is accurate, effective, and ready for production.

What you'll do

Write security rules

• Write IDPS signatures for exploits, malware, command-and-control traffic, and network attacks, with the right severity, action (alert / block / reject), and protocol scope
• Build application control rules to identify and control social media, streaming, file sharing, remote access, unsanctioned SaaS, and AI tools
• Create DLP rules to detect sensitive data (personal and financial data, confidential documents, source code) across web, email, and file transfer channels

Test and validate

• Set up test scenarios in our lab and generate traffic using browsers, command-line tools, packet captures, and safe proof-of-concept exploits
• Confirm that each rule triggers and that logs show the correct rule, severity, action, and source
• Test against normal everyday traffic to find and fix false positives before rules ship
• Build and maintain a repeatable test set so rules keep working after product updates

Research and document

• Track new CVEs, exploit techniques, and emerging applications, and turn them into working detections
• Study public r
• Study public rulesets to learn coverage patterns and find gaps in our own
• Write a short validation note for each batch: what it detects, how it was tested, and what it doesn't cover

What we're looking for

• 2-5 years of hands-on experience writing detection rules or signatures with Snort, Suricata, Zeek, YARA, Sigma, or similar
• Strong networking fundamentals: TCP/IP, HTTP/HTTPS, DNS, TLS, and packet analysis with Wireshark or pcap tools
• Experience testing rules with PoC exploits and tuning them to reduce false positives
• Exposure to CVE and vulnerability research, with the ability to read advisories and turn them into detections
• Working knowledge of Python or Bash for test automation, and comfort with Linux
• Clear written communication, since you'll document what each rule covers and what it doesn't

Good to have

• Experience with deep packet inspection, application identification (nDPI or similar), or DLP regex and pattern work
• Background at a network security vendor (firewall, IPS, NGFW, secure web gateway)
• Public work such as GitHub rules, blog posts, CVE credits, or CTF participation

This role is not

A SOC monitoring, alert triage, or pure penetration testing role. We are looking for people who write and test detection rules.

Job Description:

Mandatory Skills: Linux Administration, Production Support, Database Support, and Monitoring & Observability, with exposure to Cloud and Automation.

Primary Skills: Linux Administration, Production Support

Secondary Skills: Oracle SQL, Splunk, Grafana, AppDynamics, Cloud (OCP/AWS/Azure/GCP), Incident Management, AI/Automation (Good to have)

Experience: 3–4 Years

Location: Hyderabad

Job Responsibilities:

• Provide L2 production support and troubleshoot application or infrastructure issues.
• Monitor alerts and incidents using Splunk, AppDynamics, or ThousandEyes.
• Perform event management, incident analysis, and root cause identification.
• Manage incidents, service requests, and escalations through ServiceNow.
• Coordinate with L1, L3, and relevant teams to ensure timely issue resolution.
• Monitor system performance and maintain service availability.

Required Skills:

• Hands-on experience in L2 Production Support.
• Knowledge of Event Management and Incident Management.
• Experience with ServiceNow.
• Working knowledge of Splunk, AppDynamics, or ThousandEyes.
• Strong troubleshooting, analytical, and communication skills.

Mandatory Skills: L2 Production Support, Event Management / Mission Control, Incident Management, Linux, Linux, observability, and batch monitoring

Primary Skills:

• L2 Production Support, Event Management / Mission Control, ServiceNow, Production Monitoring, Splunk / AppDynamics / ThousandEyes

Looking for SRE Engineers

Location : Bangalore

Mode of work : Hybrid

Job Description :

• Monitoring and alerting: Watch dashboards and alerts, then triage incidents as they fire.
• Incident response: Act as first responder, follow runbooks, escalate to senior engineers when needed, and communicate status updates.
• On-call rotation: Cover after-hours shifts, usually shadowing a senior engineer at first.
• Troubleshooting: Dig through logs, metrics, and traces to find root causes.
• Ticket handling: Work the support queue, resolve user-reported issues, and route the rest.
• Runbooks and documentation: Write and update procedures so fixes are repeatable.
• Postmortems: Help write blameless incident reviews and track follow-up action items.
• Toil reduction: Script and automate repetitive manual tasks.
• Deployments and changes: Assist with releases, rollbacks, and config changes under change management.
• Basic reliability hygiene: Check backups, certificate expirations, patching, and capacity.
• The analogy: production support is the ER triage nurse, who stabilizes the patient now. The SRE is the doctor who also figures out how to keep that patient from coming back.

Greetings from NAM Info Private Limited

Job Description :

Linux System Administrator

Job Title: Linux System Administrator

Experience: 4–6 Years

Location: Olympus STP – IT, Mumbai

Employment Type: Full-Time

Job Summary

We are looking for an experienced Linux System Administrator with strong knowledge of Unix/Linux operating systems, server administration, system monitoring, troubleshooting, and performance optimization. The candidate will be responsible for maintaining Linux server infrastructure, ensuring system availability, security, and optimal performance.

Key Responsibilities

• Install, configure, and maintain Linux servers, including RHEL, CentOS, Ubuntu, and SUSE.
• Manage system boot processes, kernel parameters, services, and package updates.
• Perform server hardening and regularly apply security patches.
• Monitor server health, performance, and availability using tools such as Nagios, Zabbix, Grafana, Prometheus, or ELK.
• Perform proactive performance tuning and capacity management.
• Troubleshoot Linux system errors, crashes, and performance bottlenecks.
• Ensure high availability, system uptime, and operational stability.
• Execute routine system maintenance and support infrastructure operations.
• Maintain system documentation and follow IT operational procedures.

Mandatory Skills

• Strong Unix/Linux fundamentals and command-line proficiency.
• Hands-on Linux System Administration experience.
• Experience with RHEL, CentOS, Ubuntu, or SUSE.
• Knowledge of system boot processes, kernel parameters, and package management.
• Experience in server hardening and security patching.
• Linux troubleshooting and performance monitoring.

Preferred Skills

• Monitoring tools: Nagios, Zabbix, Grafana, Prometheus, or ELK.
• Shell scripting and automation.
• Knowledge of system performance tuning and infrastructure monitoring.

Candidate Profile

• 4–6 years of relevant experience in Linux/Unix System Administration.
• Strong troubleshooting and analytical skills.
• Good communication and coordination skills.
• Ability to work independently and support critical infrastructure operations.

1. Job Summary
2. We are looking for an experienced L2 Production Support Engineer to manage production incidents, monitor application and infrastructure health, and ensure high availability of business-critical services. The candidate will be responsible for event management, incident triage, root cause analysis, alert monitoring, and coordination with L1, L3, DevOps, infrastructure, and application teams through a Mission Control environment.
3. The ideal candidate should have hands-on experience with ServiceNow, Splunk, AppDynamics, ThousandEyes, and production monitoring tools.
4. Key Responsibilities

• Monitor production applications, infrastructure, and business services using monitoring and observability tools.
• Perform L2 production support activities, including incident investigation, troubleshooting, and resolution.
• Manage real-time alerts, events, and incidents through the Event Management / Mission Control function.
• Monitor application logs, system performance, availability, and transaction failures using Splunk, AppDynamics, and ThousandEyes.
• Analyze alerts and correlate events to identify potential service disruptions and reduce alert noise.
• Create, update, assign, and track incidents, problems, and change requests in ServiceNow.
• Perform initial impact assessment, incident prioritization, and escalation based on severity and SLA requirements.
• Troubleshoot application errors, service outages, connectivity issues, performance degradation, and recurring incidents.
• Collaborate with L1 support, L3 engineering, application development, database, network, middleware, and infrastructure teams.
• Perform root cause analysis (RCA) and contribute to problem management and preventive action plans.
• Support major incident management, bridge calls, stakeholder communication, and service restoration activities.
• Maintain incident documentation, troubleshooting procedures, operational runbooks, and knowledge articles.
• Identify recurring alerts and incidents and recommend automation or monitoring improvements.
• Participate in shift rotations, weekend support, and 24/7 operations, as required.
• Ensure compliance with operational procedures, SLAs, OLAs, and ITIL best practices.

1. Required Technical Skills
2. 1. L2 Production Support

• Hands-on experience in application or infrastructure production support.
• Incident triage, troubleshooting, service restoration, and escalation management.
• Knowledge of application logs, system health checks, and performance monitoring.
• Experience supporting business-critical production environments.

1. 2. Event Management / Mission Control

• Experience with real-time event monitoring and alert management.
• Ability to correlate events, identify service-impacting alerts, and prioritize incidents.
• Knowledge of event-to-incident workflows and major incident escalation procedures.
• Experience working in a centralized IT operations or Mission Control environment.

1. 3. ServiceNow

• Experience with ServiceNow Incident Management, Problem Management, and Change Management.
• Ability to create, update, assign, and resolve incidents while maintaining accurate ticket documentation.
• Understanding of incident priority, severity, SLA tracking, and escalation workflows.
• Exposure to ServiceNow ITOM / Event Management is an advantage.

1. 4. Monitoring and Observability Tools

• Splunk: Log analysis, searching, filtering, troubleshooting, and identifying application errors.
• AppDynamics: Application performance monitoring, transaction tracing, response-time analysis, and identifying bottlenecks.
• ThousandEyes: Network and application connectivity monitoring, path visualization, latency analysis, packet loss, and availability troubleshooting.

1. 5. Additional Technical Knowledge

• Basic understanding of Linux/Unix and Windows operating systems.
• Knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, latency, and connectivity troubleshooting.
• Basic SQL knowledge for data validation and troubleshooting.
• Understanding of REST APIs, web applications, middleware, and distributed application environments is preferred.

1. Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 3–7 years of experience in IT production support, application support, or IT operations.
• Hands-on experience with ServiceNow and at least one major monitoring or observability tool.
• Strong analytical, troubleshooting, communication, and incident management skills.
• Familiarity with ITIL processes and SLA-driven support environments.
• Ability to work under pressure and handle multiple production incidents simultaneously.

1. Preferred Qualifications

• ITIL Foundation certification.
• Experience with ServiceNow ITOM / Event Management.
• Exposure to major incident management and root cause analysis.
• Experience in enterprise, banking, telecom, retail, or other high-availability environments.
• Knowledge of automation and scripting using Shell, Python, or PowerShell.

1. Key Performance Indicators (KPIs)

• Incident response and resolution time.
• SLA compliance.
• Mean Time to Acknowledge (MTTA) and Mean Time to Resolve (MTTR).
• Production service availability and monitoring effectiveness.
• Reduction in recurring incidents and false-positive alerts.
• Quality of incident documentation and root cause analysis.

1. Ideal Candidate Profile
2. The ideal candidate is a technically strong L2 Production Support Engineer with hands-on experience in incident and event management, ServiceNow ticketing, production monitoring, and application/network troubleshooting. The candidate should be capable of quickly identifying service-impacting issues, coordinating with resolver teams, and restoring services while maintaining SLA commitments and operational stability.
3. Key skills for the role

• L2 Production Support
• Event Management / Mission Control
• ServiceNow ITSM / ITOM
• Production Monitoring and Alert Management
• Splunk
• AppDynamics
• ThousandEyes
• Incident, Problem and Major Incident Management
• Root Cause Analysis (RCA)
• ITIL and SLA Management