Architects and optimizes SIEM and Cribl telemetry pipelines; onboards diverse security data sources; develops MITRE ATT&CK-aligned detections; tunes alerts; builds dashboards and hunting queries; monitors ingestion health, costs, and coverage; troubleshoots pipeline and detection failures; mentors engineers and analysts; and maintains technical documentation, runbooks, metrics, and governance standards.
Duties & Responsibilities
- Architect and optimize SIEM platforms (e.g., Microsoft Sentinel, Splunk), including ingestion pipelines, parsing/normalization, enrichment, and correlation logic.
- Engineer and operate Cribl Stream and Cribl Edge for log routing, filtering, transformation, enrichment, data reduction, and destination fanout (SIEM, data lake, cold storage).
- Design and maintain telemetry onboarding with schema mapping, collectors/agents, connectors, API integrations, replay, and edge collection for diverse sources (endpoint, network, cloud, identity, app).
- Develop advanced detections and analytics (rules, queries, correlations) aligned to MITRE ATT&CK, emerging TTPs, and threat intelligence; measure detection efficacy and coverage.
- Lead systematic alert tuning to reduce false positives and improve signaltonoise, leveraging Cribl pipelines and SIEM analytics to standardize high-fidelity events.
- Build investigation assets (dashboards, hunting queries, data models) that accelerate SOC workflows and rootcause analysis across telemetry domains.
- Monitor ingestion health and cost (EPS/GB/day, license utilization), implement Criblbased data controls (sampling, routing, suppression) to ensure reliability and budget adherence.
- Perform RCA on detection gaps and pipeline failures; implement durable fixes in Cribl routes/pipelines and SIEM parsing/enrichment layers.
- Mentor engineers and analysts on KQL/SPL, detection engineering patterns, Cribl pipeline design, and telemetry best practices; conduct peer reviews and standards governance.
- Maintain documentation: data dictionaries, detection catalogs, Cribl pipeline/runbooks, ingestion maps, and metrics reporting on coverage, fidelity, MTTR, and pipeline SLOs.
Requirements
Basic Qualifications
- Solid understanding of network protocols, data protection mechanisms, and threat landscapes
- Hands-on experience with security systems, including firewalls, intrusion detection systems, anti-virus software, etc.
Preferred Qualifications
- Industry-recognized certifications (e.g., CISSP, CISM, CEH)
- Master’s degree in Cybersecurity or a related field
Similar Jobs
Artificial Intelligence • Big Data • Healthtech • Information Technology • Machine Learning • Software • Analytics
Supports implementation of a project management tool with AI and automation capabilities; manages request mailboxes, client questionnaires, compliance and security responses, stakeholder coordination, system access audits, content reviews, SOPs, and process documentation. The role requires collaboration with internal compliance, legal, privacy, security, and client teams while ensuring timely, accurate, and professional responses.
Top Skills:
AIAutomationContent Management LibrariesProject Management Tools
Artificial Intelligence • Big Data • Healthtech • Information Technology • Machine Learning • Software • Analytics
Lead development of backend services and responsive web interfaces using Go, React, Redux, and Node.js. Collaborate with product, design, development, and DevOps teams to deliver maintainable software. Conduct code reviews, write tested and documented code, and deploy applications on Google Cloud Platform using services such as GKE. Improve application performance, scalability, and security while supporting cross-functional delivery.
Top Skills:
BigQueryDockerEs6+GoGoogle Cloud Platform (Gcp)Google Kubernetes Engine (Gke)JavaScriptNode.jsReactReduxRelational DatabasesRestful Apis
Automotive
Manages portfolio-level governance and analysis for cross-functional transformation initiatives. Maintains roadmaps, evaluates project health, risks, dependencies, resource needs, investments, and strategic alignment. Prepares executive dashboards and decision materials, supports prioritization and capacity planning, coaches teams on portfolio standards, and drives continuous improvement across transformation management processes.
Top Skills:
ExcelJIRAMicrosoft ProjectPower BI
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
