SIEM Admin

Job Title: L1 – SIEM Administrator Experience: 1–3 Years

Location: Mumbai – Western Line

Openings: 1

Job Description We are seeking an immediate joiner for SIEM Administrator role with 1–3 years of experience to support the monitoring, administration, and first-level analysis of security events using enterprise SIEM platforms.

Candidates with strong Unix/Linux Administration experience who are looking to transition into the Cybersecurity / SIEM domain are also encouraged to apply. Roles & Responsibilities

• Configure, maintain, and troubleshoot SIEM components including Event Processors, Flow Processors, and Console
• Perform software upgrades, patches, and version migrations of SIEM platforms
• Conduct regular health checks to ensure system performance, stability, and availability
• Integrate network devices, servers, security tools, and custom applications with SIEM for log collection
• Develop and maintain custom parsers and log source extensions
• Ensure effective log normalization and event correlation for accurate threat detection
• Create, tune, and optimize correlation rules to identify security incidents and reduce false positives
• Monitor SIEM alerts and perform initial triage, analysis, and escalation of incidents
• Support incident response activities, including log analysis and evidence collection
• Collaborate with IT, SOC, and security teams during investigations
• Maintain detailed documentation, SOPs, and troubleshooting guides
• Provide support and knowledge sharing with junior team members as required

Required Skills & Qualifications

• 1–3 years of hands-on experience as a SIEM Administrator / UNIX Admin
• Experience with SIEM tools such as IBM QRadar, ArcSight, or similar platforms
• Strong knowledge of log management, event correlation, and threat detection concepts
• Hands-on experience in QRadar appliance installation, configuration, and administration
• Exposure to custom parser and log source development
• Unix/Linux administration skills (log handling, basic commands, process monitoring)
• Basic understanding of networking concepts (TCP/IP, DNS, HTTP, firewalls, IDS/IPS)
• Working knowledge of Python or Bash scripting for automation (preferred)
• Strong analytical, troubleshooting, and communication skills
• Willingness to work in shifts.
• Willingness to visit client sites.

Education & Certifications

• Bachelor’s degree in computer science, Information Security, or related field
• IBM QRadar Certified Administrator (C2150-624) or equivalent security certification – preferred

Why Join Us?

• Exposure to enterprise-scale SIEM environments
• Opportunity to grow within SOC and Cybersecurity operations
• Hands-on learning with industry-standard security tools

Employment Service Agreement 

A 2-year service agreement will be applicable, aligned with training, skill development, and exposure to enterprise SIEM platforms