Software Developer

Job Overview

We are hiring for Cyber Security SIEM Architect / Consultant (Elastic Search / Opensearch)

Location : Chennai & Bangalore

• Proven experience in designing or managing enterprise-scale SIEM platforms (Elastic Security preferred; Splunk or Sentinel experience also valued).
• Design and maintain complex data pipelines, ensuring normalized data ingestion from diverse sources (Cloud, On-prem, Network, and Endpoint).
• Highly preferred technical knowledge of Elasticsearch indexing, shard allocation, ILM (Index Lifecycle Management), and Query DSL.
• Expertise in end-to-end SIEM architecture, ensuring scalability, high availability, and cost-efficiency
• Map business risks to the MITRE ATT&CK framework to build and tune high-fidelity detection rules, reducing false positives and improving Mean Time to Detect (MTTD).
• Ensure the SIEM solution meets UK-specific regulatory requirements (e.g., GDPR, Cyber Essentials Plus, or industry-specific standards
• Strong proficiency in securing AWS, Azure, or GCP environments and ingesting native cloud telemetry.
• Experience deploying security infrastructure using Terraform, Ansible, or CloudFormation
• Proficiency in Python, Bash, or PowerShell for automation and custom API integrations.