Website:
ifalcon.co.in
Job details:
Location: Vadodara, Gujarat
Work Mode: Full-Time | Work from Office
Qualifications:
Bachelor's degree in computer science, IT, Cybersecurity, Electronics, or related field
Relevant cybersecurity certifications are an advantage:
- Splunk Certified User / Admin
- Microsoft SC-200
- IBM QRadar Certifications
- CEH / Security+ / CySA+
- Any SIEM-related certifications
Experience: 2 - 5 years of experience in SIEM/SOAR Implementation (mandatory)
About the Role:
At iFalcon Consultancy Services we help enterprises solve complex IT infrastructure and cybersecurity challenges through practical, outcome-driven solutions across networking, cloud, and security domains.
We are hiring a SIEM Engineer (Splunk/IBM Qradar) who will be responsible for implementing and deploying SIEM platforms. The candidate should have hands-on experience with at least any 2 SIEM/SOAR platforms and should understand the architecture.
Key Responsibilities:
- Own the end-to-end technical delivery of SIEM/SOAR, including architecture, design, implementation, testing, and operational handover.
- Lead implementation of Splunk/IBM QRadar platform capabilities, including data onboarding, index strategy, field mapping, dashboards, alerting, and operational controls.
- Define log source onboarding patterns for infrastructure, applications, security tools, cloud platforms, network devices, and identity platforms.
- Define SIEM/SOAR architecture across log collection, aggregation, ingestion, parsing, enrichment, detection engineering, alerting, case management, and automation.
- Lead development of detection use cases, correlation rules, threat hunting capabilities, and SOC monitoring content aligned to priority threats and operational requirements.
- Work with SOAR platforms for automation and playbook execution.
- Provide technical leadership to SIEM developers, testers, and operational teams.
- Review and approve architecture artefacts, detailed designs, onboarding standards, use case documentation, playbooks, test evidence, and operational runbooks.
Required Product Experience: (Any 2 - 4 of the following domains)
SIEM Platforms: Splunk, IBM QRadar, FortiSIEM, Palo-Alto XSIEM, Microsoft Sentinel, ArcSight
SOAR Platforms: Splunk SOAR, Palo-Alto Cortex XSOAR, FortiSOAR, Microsoft Sentinel
Technical Skills Required:
- Demonstrated experience in SIEM engineering, security architecture, or security platform delivery roles.
- Proven experience leading enterprise SIEM/SOAR implementations.
- Deep understanding of log aggregation, ingestion pipelines, parsing, normalisation, enrichment, correlation, alerting, dashboards, and operational monitoring.
- Strong experience designing detection use cases, SOC workflows, SOAR playbooks, threat intelligence integration, and threat hunting capabilities.
Good to Have (Not Mandatory):
- Basic scripting knowledge: Python, PowerShell, Bash
Soft Skills Required:
- Good client communication and documentation skills.
- Willingness to travel client site for deployment, if required.
Why Join Us?
- Opportunity to work on enterprise-level cybersecurity projects.
- Exposure to global customers and advanced security technologies.
- Hands-on learning in SIEM, SOAR, Cloud Security, and IR operations.
- Career growth opportunities in cybersecurity engineering and consulting.
- Collaborative and technically driven work environment.
- Opportunity to work with multiple enterprise security products and vendors.
Click on Apply to know more.
