SOC SIEM Engineer L2

Job Summary

SOC SIEM Engineer L2 - Swan Solutions. We are looking for an experienced SOC SIEM Engineer L2 to monitor and manage security events, SIEM platforms, log integrations, and security incident investigations. The role involves maintaining SIEM health, developing correlation rules, troubleshooting log collection, and working with infrastructure and security teams.

Location: Pune

Employment Type: Yearly Contract Basis

Experience: 3-7 Years

Working Days: Monday to Saturday

Shift: 9:00 AM - 6:00 PM

Responsibilities

• Monitor and analyze security events, alerts, and incidents.
• Manage and administer SIEM platforms such as Wazuh, Microsoft Sentinel, Splunk, and QRadar.
• Integrate logs from firewalls, servers, network devices, cloud platforms, and applications.
• Troubleshoot log collection, parsing, agents, and SIEM performance issues.
• Develop, tune, and maintain SIEM correlation rules, dashboards, and reports.
• Support security incident investigation and response activities.
• Monitor SIEM platform availability, health, and performance.
• Coordinate with infrastructure, network, and application teams for security integrations.

Required Skills

• Hands-on experience with SIEM platforms such as Wazuh, Splunk, Sentinel, or QRadar.
• Strong knowledge of Syslog, log management, Linux, Windows, and TCP/IP networking.
• Knowledge of VPN, Firewall, and DNS.
• Experience with log integration, parsing, and troubleshooting.
• Basic scripting knowledge in Python, Bash, or PowerShell.
• Understanding of Mitre attck, NIST, and incident response processes.
• Strong analytical and troubleshooting skills.

Qualifications

B.E. / B.Tech or relevant degree.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.