Senior Security Engineer - Integration

Profile Overview:

Were searching for Senior Security Engineer to assist our 247 managed security operations center. This role is in Integration Department, responsible for the strategic, technical, and operational direction of the Integration Team

Roles and Responsibilities:

• IBM QRadar/ Sentinel / Datadog , Integration and content management, Event Collector deployment/upgradation.
• Troubleshooting skills at all layers of OSI Model.
• Onboard all standard devices to QRadar, such as Windows Security Events, Firewalls, Antivirus, Proxy etc.
• Onboard non-standard devices by researching the product and coordinating with different teams. Such as application onboarding or onboarding new security products.
• Developing and Deploying connectors and scripts for log collection for cloud-based solutions.
• Detailed validation of parsing and normalization of logs before handing over to SOC team will be day to day Job.
• Coordinate between customer and internal teams for issues related to log collection.
• The engineer needs to make sure that various team have completed their tasks, such as log validation, Log Source Not Reporting (LSNR Automation), Content Management before the Log Source is in production.
• Troubleshooting API based log sources.
• Documentation of integrations and versioning .

Essential Skills:

• Prior SIEM administration and integration experience ( QRadar , Splunk , Datadog , Azure Sentinel)
• Network and Endpoint Device integration and administration
• Knowledge of Device Integration : Log , Flows collection
• Knowledge of Regular Expression and scripting language (ex: Bash , Python , PowerShell ), API implementation and development.
• Knowledge of Parser creation and maintenance .
• Knowledge of Cloud technologies and implementation .
• Excellent in verbal and written communication .
• Hands on experience in Networking , Security Solutions and Endpoint Administration and operations .