Freelance Cybersecurity Engineer – SIEM, SOC, Vulnerability Management & Security Operations

Job Type: Freelance / Independent Contractor
Work Arrangement: Remote
Engagement Type: Project-Based / Flexible Hours

Job Overview

We are looking for experienced Freelance Cybersecurity Engineers to provide technical support, implementation assistance, troubleshooting, and project-based services across various cybersecurity domains. Candidates should have hands-on experience with enterprise security tools, security operations, vulnerability management, security monitoring, and industry-standard security frameworks.

This is a flexible freelance opportunity for professionals who can independently support assigned technical tasks and deliverables based on project requirements.

Key Responsibilities

• Support Security Operations Center (SOC) activities, security monitoring, alert triage, threat detection, and incident investigation.
• Configure, administer, and troubleshoot Security Information and Event Management (SIEM) platforms.
• Develop and optimize detection rules, dashboards, correlation searches, alerts, and reports.
• Perform vulnerability scanning, assessment, prioritization, remediation tracking, and reporting.
• Assist with security incident response, threat hunting, log analysis, and root-cause investigation.
• Support endpoint detection and response (EDR), extended detection and response (XDR), firewall security, and endpoint protection solutions.
• Assist with security assessments, risk analysis, security hardening, and compliance initiatives.
• Support implementation and assessment of security controls aligned with NIST, NIST Cybersecurity Framework (CSF), NIST SP 800-53, NIST SP 800-171, ISO 27001, CIS Controls, SOC 2, and other relevant standards.
• Prepare technical documentation, security reports, remediation plans, and project deliverables.
• Collaborate remotely with project teams to resolve technical issues and meet agreed deadlines.

Key Cybersecurity Tools & Technologies

1. SIEM & Security Analytics

• Splunk Enterprise Security (Splunk ES)
• Microsoft Sentinel
• IBM QRadar
• Google Security Operations (formerly Chronicle)
• Exabeam
• Securonix
• Elastic Security

2. SOC, SOAR & Security Automation

• Splunk SOAR
• Palo Alto Cortex XSOAR
• Microsoft Sentinel automation and playbooks
• IBM QRadar SOAR
• Security alert triage, incident response workflows, threat intelligence integration, and detection engineering

3. Vulnerability Management & Security Assessment

• Tenable / Nessus
• Qualys VMDR
• Rapid7 InsightVM / Nexpose
• Microsoft Defender Vulnerability Management
• CrowdStrike Exposure Management
• Vulnerability assessment, risk-based prioritization, remediation validation, and compliance reporting

4. EDR, XDR & Endpoint Security

• CrowdStrike Falcon
• Microsoft Defender for Endpoint
• SentinelOne
• VMware Carbon Black
• Cortex XDR
• Trend Micro Vision One

5. Network Security & Firewall Technologies

• Palo Alto Networks
• Fortinet FortiGate
• Check Point
• Cisco Secure Firewall
• Zscaler
• IDS/IPS, VPN security, network traffic analysis, and firewall policy management

6. Threat Intelligence, Detection & Incident Response

• MITRE ATT&CK
• YARA and Sigma rules
• Threat hunting and detection engineering
• Malware and phishing investigation
• Incident response, forensic analysis, and threat intelligence platforms

7. Governance, Risk, Compliance & Security Frameworks

• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53 and NIST SP 800-171
• ISO/IEC 27001
• CIS Critical Security Controls
• SOC 2
• PCI DSS
• HIPAA security requirements
• Risk assessments, security control validation, audit evidence, and remediation tracking

8. Cloud Security

• AWS Security Hub and GuardDuty
• Microsoft Defender for Cloud
• Google Security Command Center
• Cloud security posture management (CSPM)
• Cloud workload protection and identity security

Required Qualifications

• Hands-on experience in one or more cybersecurity domains, such as SIEM, SOC operations, vulnerability management, incident response, endpoint security, cloud security, or GRC.
• Practical experience with relevant enterprise security tools and platforms.
• Strong knowledge of security monitoring, threat detection, vulnerability remediation, and security best practices.
• Familiarity with NIST frameworks and other relevant security standards, depending on the assignment.
• Strong analytical, troubleshooting, communication, and documentation skills.
• Ability to work independently and deliver assigned tasks within agreed timelines.

Relevant certifications such as Security+, CySA+, CISSP, CISM, CEH, GIAC, Splunk certifications, or vendor-specific security certifications are an advantage but are not mandatory.

Compensation & Engagement

Compensation will be based on technical expertise, project scope, experience, and mutually agreed hourly or project-based rates. Work availability and engagement duration will depend on client and project requirements.

How to Apply

Interested candidates should submit their updated resume along with the following details:

• Primary cybersecurity specialization
• Years of relevant hands-on experience
• Security tools and technologies worked with
• Relevant project experience and certifications
• Current availability
• Expected hourly or project-based rate

We welcome qualified cybersecurity professionals interested in flexible, remote, freelance technical support and project-based engagements.

Pay: ₹8,000.00 - ₹10,000.00 per week

Benefits:

• Flexible schedule
• Work from home

Work Location: Remote