L3 Engineer

SOC L3 Engineer (Elastic SIEM & SOAR)

Exp: 5-12 YRS

Location : Bangalore

Role: Permanent

Comfortable to work on 24/7 shift timings.

Role Summary

Seeking an experienced SOC L3 professional with strong expertise in Elastic Security (SIEM) and SOAR platforms. The candidate should possess hands-on experience in SIEM implementation, administration, content engineering, threat hunting, incident response, and SOC optimization across multiple SIEM technologies such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, or similar platforms.

Required Skills:

Strong hands-on experience with Elastic SIEM / Elastic Security.
Experience with Elastic Defend, Kibana, Elasticsearch, Logstash, Beats, Fleet, and detection engineering.
Hands-on experience in SOAR implementation and automation orchestration.
Experience implementing or managing other SIEM platforms such as Microsoft Sentinel, QRadar, Splunk, FortiSIEM, ArcSight, Sumo Logic, Stellar Cyber, or equivalent.
Strong understanding of Windows, Linux, Active Directory, Azure, AWS, networking, and cloud security.
Knowledge of MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat intelligence.
Experience with scripting (Python, PowerShell, Bash) for automation.
Understanding of EDR/XDR, NDR, Email Security, IAM, and Security Controls integration