Security Information and Event Management (SIEM) Jobs in Bangalore (Bengaluru)
Cyber Security Operations - Lead
6+ yrs | Bangalore Office
Responsibilities
● Lead and manage Security Operations Center
● Primarily responsible for security event monitoring, management and response
● Ensure incident identification, assessment, quantification, reporting, communication, mitigation and
monitoring
● Monitor indicators of compromise related to advanced, targeted attackers
● Provide recommendations based on best practices and experience to develop processes that will enhance
efficiencies needed to perform security related responsibilities
● Identify threats and manage the threat profile of Open
● Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives
● Revise and develop processes to strengthen the current Security Operations Framework, Review policies
and highlight the challenges in managing SLAs
● Perform threat management, threat modeling, identify threat vectors and develop use cases for security
monitoring
● Responsible for integration of standard and non-standard logs in SIEM
● Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt.
● Coordination with stakeholders, build and maintain positive working relationships with them
● Maintain Open’s bug bounty programs
Requirement :
● 8+ years Experience in information security
● Experience working on tools like prisma cloud, pingsafe, SIEM - Wazuh etc
● Experience setting up SOC a plus
● Proficient in Incident Management and Response
● Experience in security management and SIEM
● In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk
management, incident management etc.
● Experience in threat management
● Knowledge of applications, databases, middleware to address security threats against the same.
● Proficient in preparation of reports, dashboards and documentation
● Excellent written and verbal communication skills
● Ability to make concrete progress in the face of ambiguity and imperfect knowledge
● Ability to handle high pressure situations with key stakeholders
● Good Analytical skills, Problem solving and Interpersonal skills
● Lead and manage Security Operations Center
● Primarily responsible for security event monitoring, management and response
● Ensure incident identification, assessment, quantification, reporting, communication, mitigation and
monitoring
● Monitor indicators of compromise related to advanced, targeted attackers
● Provide recommendations based on best practices and experience to develop processes that will enhance
efficiencies needed to perform security-related responsibilities
● Identify threats and manage the threat profile of Open
● Ensure compliance with SLA, process adherence and process improvisation to achieve operational objectives
● Revise and develop processes to strengthen the current Security Operations Framework, Review policies
and highlight the challenges in managing SLAs
● Perform threat management, and threat modeling, identify threat vectors and develop use cases for security
monitoring
● Responsible for integration of standard and non-standard logs in SIEM
● Creation of reports, dashboards, and metrics for SOC operations and presentation to Sr. Mgmt.
● Coordination with stakeholders, build and maintain positive working relationships with them
● Maintain Open’s bug bounty programs
Requirement :
● 8+ years of Experience in information security
● Experience working on tools like Prisma cloud, pingsafe, SIEM - Wazuh etc
● Experience setting up SOC a plus
● Proficient in Incident Management and Response
● Experience in security management and SIEM
● In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk
management, incident management etc.
● Experience in threat management
● Knowledge of applications, databases, and middleware to address security threats against the same.
● Proficient in the preparation of reports, dashboards and documentation
● Excellent written and verbal communication skills
● Ability to make concrete progress in the face of ambiguity and imperfect knowledge
● Ability to handle high-pressure situations with key stakeholders
● Good Analytical skills, Problem solving and Interpersonal skills
At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.
Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.
F5 is looking for a Sr. Security Engineer with experience in building, integrating, operating, and maintaining robust security monitoring and auditing systems. F5’s Edge 2.0 platform provides global, scalable, and secure way to deploy applications. In this position, you will build and maintain monitoring and audit systems across the platform that provide necessary visibility and alerts to effectively defend the platform.
Responsibilities:
- Collaborate with software architects, security defenders, Operations, SRE, compliance experts, and business leaders to understand the logical boundaries of the systems and identify the events to monitor, audits to maintain, alerts to tweak, as well as systems to integrate with
- You will continuously hunt for areas and metrics to be added into monitoring systems for better operational visibility, incident response capability, availability, and forensics capability of the overall platform
- You will participate in the definition of processes around change and inventory management and develop solutions to audit the changes
- You will work with other teams within security organization to define communication and alerting protocols for effective and timely actions
- You will participate in defining and executing the Incident Response Plan for the platform and be responsible for providing necessary information during the response and forensics
- Demonstrate technical leadership in multiple domain areas, providing mentorship to other team members
Minimum qualifications:
- BS degree in Computer Science or equivalent with 5+ years of security operation and monitoring experience
- Experience with logging, monitoring, SIEM, dashboarding tools like AWS GuardDuty, Sumo, Grafana, SolarWinds, DataDog, Splunk, etc.
- Working knowledge of at least one Cloud Computing platform (e.g. Amazon AWS, Microsoft Azure, Google Compute etc.)
- Good understanding of how to handle logs from various systems, integrate with systems handling logs and metrics, how to setup and tune alerts based on thresholds and policies
- Hands on experience with computer programming languages and/or scripting languages such as Python, Java, Shell
- Good understanding of complexities and security challenges in large-scale distributed systems
- Working knowledge of Cloud orchestration systems such as Kubernetes, Openstack etc.
- Self-motivated and willing to delve into new areas and take on new challenges in an enthusiastic manner
- Excellent written and verbal communication skills
- Strong interpersonal, team building, and mentoring skills
What you will be doing:
- Participate in network and security initiatives, network designs, project plans, and deployments as well as coordinating technical issues with vendors and internal teams
- Contribute to design, installation, maintenance, vulnerability remediation, and monitoring of network and security systems
- Responsible for expert-level troubleshooting of any problems relating to global issues - participation in security incident management and response.
- Providing support and guidance to Technology teams across network and security technologies.
- Adhere to IT access-management incident response and change control procedures (ITIL)
- Continuous documentation of the IT network infrastructure including technical specifications, design documents, roll-out, and disaster recovery plans
What we are looking for:
A Network Security engineer with a solid comprehensive background in:
- Ability to manage, supervise and delegate multiple tasks
- Strong experience with SIEM and log management
- EDR (Endpoint Detection and Response - especially in Microsoft ATP, Defender or SentinelOne) configuration and management.
- Vendor management; including SOC (Security Operations Centre) providers
- Global Security Incident management support
- Experience in SD-WAN (Meraki) management and troubleshooting
- Knowledge of network security, hardening network equipment, and vulnerability scans
- Experience in Microsoft security and endpoint management tooling such as MCAS and MEM
- Excellent troubleshooting skills. Ability to rapidly identify respond to and resolve issues
- Proven experience in remote access technologies (ZScaler an advantage)
- Excellent communication skills (written and verbal).
- An ability to work under pressure and take ownership of tasks and customer issues.
- Ability to work individually and as part of a global Infrastructure Technology team with regional teams in India, UK and North America.
Information Security Specialist
Notice Period: 45 days / Immediate Joining
Banyan Data Services (BDS) is a US-based data-focused Company that specializes in comprehensive data solutions and services, headquartered in San Jose, California, USA.
We are looking Information Security Specialist who has the expertise and deep knowledge of Information security regulations, compliance, and SIEM tools, and the ability to develop, describe and implement Security Baselines and Policies.
It's a once-in-a-lifetime opportunity to join our rocket ship startup run by a world-class executive team. We are looking for candidates that aspire to be a part of the cutting-edge solutions and services we offer that address next-gen data evolution challenges.
Key Qualifications
· Design, deploy, and support Information Security Solutions provided by BDS
· Assist clients to carry out the IT Risk Management assessment on both on-prem and cloud platforms
· Provide subject matter expertise on IT security compliances during the security audits to meet various security governances.
· Research and strategic analysis of existing, and evolving all IT and data security technologies
· Establish baselines to define required security controls for all infrastructure components and application stack
· Follow latest vulnerabilities and threats intelligence updates across a wide range of technologies and make recommendations for improvements in the security baselines.
· Overseeing security event monitoring, understand the impact, and coordinate remediation efforts
· Create and optimize the SIEM rules to adjust the specification of alerts in responding to incident follow up
· Must be able to work a flexible schedule during off-hours
Key Skills & Qualification
· Minimum of 4 years relevant work experience in information/cyber security, audit, and compliance
· Certifications in any of technical security specialty (e.g., CISA, CISSP, CISM)
· Experience in managing SIEM products like Arcsight, Qradar, Sumo Logic, RSA NetWitness Suite, ELK, Splunk
· Exposure of the security audit tools on public cloud platforms
· Solid understanding of the underlying LINUX/UNIX and Windows OS security architecture
· Certified Ethical Hacker would be a plus
· Handling of Security audits is a must
· Proven interpersonal skills while contributing to team effort by accomplishing related results
· Passion for learning new technologies and the ability to do so quickly.
www.banyandata.com
Security Monitoring and Operations (SIEM)
Security Solutions design and deployment
IDAM - Identity and Access Management Experience
Network Monitoring and Management Experience
VAPT - Vulnerability Assessment and Penetration Assessment
Experience on DLP and Endpoint Security
Knowledge on Encryption
Experience in performing Maturity Assessment for identifying the security gaps and recommending measures to fix the gaps
Experience in Audit controls and applying security measures (ISO, PCI etc..)
Knowledge in automation and scripting
