Security Advisor

 About The Role  

Project Role :Security Advisor

Project Role Description :Provide enterprise-level advice to make organizations cyber resilient. Assist in navigating the complex landscape of cyber threats, ensuring robust digital asset protection while maintaining trust with stakeholders.
Must have skills :Security Information and Event Management (SIEM)

Good to have skills :NA
Minimum 3 year(s) of experience is required

Educational Qualification :15 years full time education
Summary:As a Security Advisor, we are seeking a Data Source Onboarding Consultant to lead and support the integration of critical data sources into our security infrastructure. This role focuses on the technical and procedural aspects of onboarding logs and telemetry from various systems (on-premises, cloud, network, application, etc.) into our SIEM (CrowdStrike Next-Gen SIEM) and related platforms to ensure comprehensive visibility and threat detection. Roles & Responsibilities:- Work with IT and business units to identify relevant data sources for security monitoring.- Onboard logs into the SIEM (CrowdStrike Next-Gen SIEM) using data connectors, Falcon Log Collector, and other supported ingestion methods.- Validate log ingestion, ensure proper parsing, and verify that logs align with established schemas (e.g., CEF, LEEF, Syslog, JSON).- Map log data to security use cases and detection rules and Configure log collection agents (e.g., Syslog, Fluentd).- Set up API integrations for cloud-native sources.- Customize and maintain parsers, log collectors, and transformation rules.- Maintain detailed documentation of onboarding procedures, configurations, and troubleshooting steps.- Conduct data quality reviews and log validation exercises.- Optimize data ingestion for performance and cost-effectiveness (e.g., reducing noisy logs, adjusting retention settings).- Tune and test correlation rules associated with newly onboarded data sources.- Work cross-functionally with SOC analysts, SIEM admins, application owners, and infrastructure teams Professional & Technical
Skills:

-
Must To Have Skills:

Proficiency in Security Information and Event Management (SIEM).- Strong understanding of incident response and threat detection methodologies.- Experience with security monitoring tools and techniques.- Knowledge of compliance frameworks and regulations related to cybersecurity.- Ability to analyze security incidents and provide actionable recommendations.- Experience with cloud logging (AWS CloudTrail, Azure Monitor, GCP Logging).- Scripting and automation skills (e.g., PowerShell, Python, Bash).- Understanding of MITRE ATT&CK, NIST, or other security frameworks.- Excellent communication and interpersonal skills.- Ability to explain technical concepts to non-technical stakeholders.- Strong analytical, troubleshooting, and organizational skills.- Project management skills and ability to handle multiple onboarding projects simultaneously.
Additional Information:- The candidate should have minimum 8+ years of experience in a cybersecurity, security engineering, or SIEM-related role.- Experience with onboarding data into SIEM platforms such as CrowdStrike Next-Gen, Splunk, Azure Sentinel.- This position is based at our Bengaluru office.- A 15 years full time education is required.- Bachelors degree in computer science, Information Security, or related field.

Strong understanding of logging standards and protocols (Syslog, Windows Event Logs, API, JSON, CEF, etc.).- Familiar with common operating systems (Linux, Windows), networking devices, cloud environments, and enterprise applications.
 Qualification 15 years full time education