L2 SIEM Administrator - LogRhythm

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

Cyber Toddler is inviting applications for its 6-week Cybersecurity Operations, SOC & Threat Intelligence Internship — a weekend-only practical program designed for students, fresh graduates and early-career cybersecurity professionals.

The internship focuses on the skills used across modern security operations, including SOC monitoring, SIEM and log analysis, threat intelligence, incident response, threat hunting and security detection.

Rather than focusing only on theoretical learning, selected interns will work through simulated security incidents, investigate logs and indicators, analyze threats, document findings and complete a final cybersecurity investigation project.

What you will work on:

• SOC operations and security monitoring
• SIEM concepts and log analysis
• Security alert triage
• Threat intelligence and IOC investigation
• Phishing and suspicious activity analysis
• Incident response
• MITRE ATT&CK
• Threat hunting
• Detection engineering fundamentals
• Security investigation and reporting
• Cybersecurity documentation
• End-to-end SOC investigation

Duration: 6 weeks

Mode: Remote

Schedule: Weekends

Commitment: Approximately 4–5 hours per week

Cohort: Limited seats

Job Description – Tines SOAR Engineer

Job Title: Tines SOAR Engineer

Experience: 6+ Years

Employment Type: Contract

Job Location: India – Hybrid/Remote

Company: Prama.ai

About the Role

Prama.ai is looking for an experienced Tines SOAR Engineer to design, develop, and maintain security automation workflows for enterprise SOC environments. The ideal candidate should have strong hands-on experience with Tines SOAR, security operations, incident response, API integrations, and automation.

Key Responsibilities

• Design, develop, and maintain automation workflows (Tines Stories).
• Build and enhance security playbooks for incident response and alert handling.
• Develop integrations between Tines and SIEM, EDR/XDR, IAM, ITSM, and other security tools.
• Implement integrations using REST APIs, Webhooks, JSON, and OAuth.
• Automate repetitive SOC and security operations to improve incident response efficiency.
• Troubleshoot, monitor, and optimize Tines automation workflows.
• Collaborate with SOC, Security, Infrastructure, and IT teams.
• Support security automation use cases across enterprise environments.

Required Skills

• 6+ years of IT/Security experience with strong hands-on experience in Tines SOAR.
• Hands-on experience developing Tines Stories, Actions, Event Transformations, and API integrations.
• Strong understanding of SOC, Incident Response, Security Operations, and Security Automation.
• Strong knowledge of REST APIs, JSON, Webhooks, and OAuth.
• Experience with at least one SIEM:
• Microsoft Sentinel
• Splunk
• IBM QRadar
• Google Chronicle
• Experience with at least one EDR/XDR:
• Microsoft Defender
• CrowdStrike
• SentinelOne
• Cortex XDR
• Scripting experience in Python, JavaScript, or PowerShell.
• Experience with ServiceNow or Jira.
• Working knowledge of Windows/Linux environments.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS.
• Knowledge of Active Directory, Entra ID, or Okta.

Preferred Skills

• Experience working with Banking/BFSI clients.
• Knowledge of Microsoft Security Stack.
• Understanding of Threat Intelligence and MITRE ATT&CK.
• Exposure to AWS or Azure Security.
• Experience with enterprise SOC automation and security integrations.

Preferred Certifications

• Tines Certification
• Microsoft SC-200
• CompTIA Security+ / CySA+
• Microsoft AZ-500

This role will be permanent with NAM info and deploy to client location Chennai.

Work Mode: WORK FROM OFFICE

Offer salary can offer on a decent hike

Role Descriptions:

Exp Range: 6-10 years

Primary Competency : Terraform, Hashi Sentinel (IaC/PaC), Kubernetes (GKE/EKS)

City Locations: Bengaluru or Chennai

Key Responsibilities*

Experience Required: 6-10

Role Descriptions:

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1

2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools

3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)

4. Validate true positives and recommend reducing false positives

5. Lead triage and response for medium to high severity incidents

6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required

7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)

8. Fine-tuning and optimize SIEM use cases to reduce false positives

9. Develop new correlation rules and detection logic

10. Document incidents, findings, and response actions

11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Desire candidate

• Candidate should have valid PF.

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

About the role

We’re hiring an IT Systems Administrator for an NBFC to secure endpoints, SaaS, and networks across ~50 branches, ~250+ field staff, and ~50+ office users.

This is primarily an IT Admin + Security role, with secondary exposure to AWS cloud ops + light DevOps + basic DB access management.

If you’re an IT Admin aiming to break into AWS Cloud Ops + DevOps, this role is a strong next step — you’ll own core IT/security and get hands-on exposure to cloud operations and deployments.

Key responsibilities (Primary: IT Admin + Security)

• Manage endpoint security for laptops and mobiles (policies, patching, encryption, antivirus/EDR); drive MDM implementation now/future (e.g., Intune/Jamf).
• Administer Google Workspace (Gmail/Drive/Calendar): users, groups, permissions, SSO, MFA, sharing controls.
• Own joiner–mover–leaver lifecycle: provisioning/deprovisioning, access controls, periodic access reviews.
• Secure branch connectivity: VPN, internal Wi-Fi, internet usage controls; coordinate troubleshooting and standardization across branches.
• Manage HO security stack: firewall operations, rule changes with change control, monitoring/log review (basic but consistent).
• Secure SaaS tools (CRM/HRMS/comms like Slack/Zoom): role-based access, MFA enforcement, offboarding, integration/OAuth controls.
• Maintain IT asset inventory: procurement coordination, issuance/return, audits, warranty/AMC, license renewals; remote lock/wipe for lost devices.
• Handle security incidents: phishing, account compromise, device loss/theft — contain, investigate, recover, and prevent recurrence.
• Run backups and basic DR testing; maintain SOPs/documentation and train staff on cyber hygiene.
• Provide hands-on user support: laptop builds, software installs, Outlook/Excel issues, VPN/Wi-Fi troubleshooting, escalations and vendor coordination.

Secondary responsibilities (AWS + DevOps + DB ops support)

• Support AWS administration: IAM users/roles/policies, MFA, access key hygiene, basic log review (e.g., CloudTrail).
• Manage AWS access controls: security groups/firewall rules, IP allowlists/whitelisting (admin tools, databases, vendor access).
• Assist engineering with DevOps operations:
• CI/CD support (deployment coordination, rollbacks, environment configuration)
• Secrets/credentials management and rotation (no shared creds)
• DNS + SSL/TLS certificates, basic monitoring/alerting coordination
• Bonus: Docker/Kubernetes and Terraform exposure
• Basic database operations (admin-lite):
• DB user creation, roles/permissions, least-privilege access
• IP allowlisting/whitelisting for DB access via VPN/approved sources
• Backup/restore verification coordination and basic monitoring signals (connections/storage)

Requirements

• 3+ years in IT security / systems administration (BFSI or branch-heavy org preferred).
• Hands-on with Google Workspace or Microsoft 365 administration.
• Must have hands-on experience leading or executing an email suite migration (e.g., Google Workspace ↔ Microsoft 365), including mailbox migration, DNS cutover, MX/SPF/DKIM/DMARC reconfiguration, and user transition management.
• Strong endpoint/security fundamentals: encryption, patching, AV/EDR, remote support, device compliance.
• Comfortable with networks: VPN/Wi-Fi/LAN troubleshooting; firewall basics and change discipline.
• Strong operational discipline: asset tracking, vendor management, documentation, ticketing, user communication.
• Practical AWS familiarity (IAM, access controls, logging) and ability to support DevOps workflows.

Nice to have

• Experience implementing MDM at scale (Intune/Jamf/SureMDM).
• Exposure to SOC2 / ISO27001 evidence, controls, and audit workflows.
• Scripting for automation (PowerShell/Bash/Python).
• Familiarity with managed databases and secure access patterns.