Jobs

Interviews
Job Alerts
Tools

Upskill and Grow with AI

Mock Interview Practice interviews in realistic simulations

Coding Practice Improve your coding skills with challenges

Certification Earn certifications to validate your skills

AI Learning Get trained with AI expert sessions

Career Path AI insights for smarter career decisions

AI Job Match Score AI-Powered Job Match Against Your Resume and Optimize Your Resume

Career Tools and Resources

Resume Builder Build Professional Resume with Ease

ATS Friendliness Check Check Resume Friendliness for Applicant Tracking Systems

Auto Apply Apply to hundreds of jobs on any platform effortlessly

Co-Pilot (Chrome Extension) Your AI Assistant for Seamless Browsing Efficiency

Interview Questions Streamline interviews with ready-to-use questions

Salaries Discover market-driven salary insights across skillsets and geographies

Companies Explore leading companies actively hiring talent
For Employers

Home
>
Jobs in pune
>
Tetra Pak
>
SIEM Platform Lead

SIEM Platform Lead

Tetra Pak

5 - 10 years

20 - 25 Lacs

pune

Posted:4 days ago| Platform:

Apply

Skills Required

unix automation sap linux networking application development windows troubleshooting open source python

Work Mode

Work from Office

Job Type

Full Time

Job Description

The security information and event management (SIEM) platform lead will be responsible for implementing, maintaining, monitoring and managing SIEM solutions deployed throughout the security operations center (SOC)
Working alongside SOC and Threat and Exposure Management team members, the SIEM platform lead facilitates architectural designs, best practices, and event and incident response duties
The SIEM platform lead is expected to contribute to the corporate security strategy and collaborate with security leadership and other security technologists
The SIEM platform lead provides support to the incident response, forensic, application and networking teams, and works with IT infrastructure, application development, security operations, security audit and end user sources of information to ensure collection, correlation and reporting, as well as facilitation of corporate-wide security events

Role and responsibilities:

The SIEM Platform Lead provides proactive and preventive analysis of systems through product-specific SIEM tools and ancillary solutions used in security. The role also ensures SIEM solutions aid in the output of metrics to senior management to help maintain a safe and secure enterprise technical operation. Daily, the platform lead ensures SIEM and automation solutions are healthy, maintaining integrity and performing optimally, and that capacity keeps up with demand. To be successful, a solid understanding of and practical hands-on experience with security principles, host configurations and networking is required.

Key Responsibilities:

Leading SIEM solution design, related components, and the confidentiality, integrity and availability (CIA) of logs.
Implement, manage and maintain event and log collection, reporting and compliance requirements.
Design and build SIEM dashboards and reporting tools required by technical teams.
Act as a key member and contact for the security operations center (SOC) and incident response team.
Help correlate events to support SOC response requirements.
Be readily available for incident response, forensic, troubleshooting and security issues requiring event details.
Maintain up-to-date level of knowledge related to security threats, vulnerabilities and mitigations set forth to reduce attack surface.
Tune the SIEM with threat intelligence sources (eg, premium, industry-shared, open-source and dark web), and correlate event indicators and threats.
Support SOC automation initiatives leveraging playbooks, while also using human analysis as needed.
Connect events to contextual security reports that security management and technical teams can easily comprehend.
Actively participate in threat hunting tabletop exercises to hone and strengthen skills across the team.
Work closely with Information Security leadership to instill cybersecurity policies and practices throughout business units that address security operations, incident response, application security and infrastructure.
Actively engage in security projects across the business to implement event and logging requirements.
Perform other duties as assigned.

We believe you have

At least 5 years cybersecurity experience (or IT coupled with cybersecurity) with at least 2 years in an engineering-based role supporting SOC and IR teams.
Proficient in one or more SIEM (eg, QRadar, Splunk, LogRhythm,).
Knowledgeable of or hands-on experience with supporting intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint solutions, data loss prevention (DLP), Active Directory (AD) and application security.
Advanced knowledge of operating system configuration (Windows, Unix, Linux) and networking (DNS, DHCP, routing protocols).
Ability to interface with threat intelligence platforms and SOAR solutions to centralize and manage incidents and remediation workflow.
Ability to analyze event and incident logs and work with SOC and IR teams to assess security events related to malware, vulnerabilities, exploits and kill chain methodology.
Strong understanding of key performance indicators (KPIs) and service-level agreements (SLAs) attributed to security and business objectives for key stakeholders.
Ability to liaison to conduct tabletop exercises for security incident and events.
Some experience in a cloud-based SIEM environment and migration from on-prem to cloud preferred.
Experienced with one or more scripting languages (eg, Python, PowerShell, Bash, etc).
Basic knowledge of adversary tactics, techniques and procedures (TTPs) and MITRE ATT&ACK principles.

Education Requirements:

bachelors degree preferred in cybersecurity, computer science, engineering or related field.
3-5+ years of cybersecurity or information technology practitioner experience.
2+ years of related security systems administration with endpoint, network, application and host-based security solutions.
2+ years working in or with SOC and IR teams.
CISSP, GSEC, GCIH, GCIA, GCFE preferable, but not required.

A variety of exciting challenges with ample opportunities for development and training in a truly global landscape
A culture that pioneers a spirit of innovation where our industry experts drive visible results
An equal opportunity employment experience that values diversity and inclusion
Market competitive compensation and benefits with flexible working arrangements

More Jobs at Tetra Pak

Global Process Coach Finance & Tax

Pune, Maharashtra

Experience: Not specified

Salary: Not disclosed

Field Service Engineers / Technicians

Dantan

2 - 7 yrs

INR 4 - 8 Lacs

Customs Expert

Pune

12 - 15 yrs

INR 37 - 45 Lacs

Customs Expert

Pune, Maharashtra, India

12 - 15 yrs

Salary: Not disclosed

Automation Engineer/Senior Automation Engineer

Pune

4.0 - 8.0 yrs

INR 6 - 10 Lacs

Mock Interview

Practice Video Interview with JobPe AI

Start Python Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Enhance Your Python Skills

Practice Python coding challenges to boost your skills

Start Practicing Python Now

Tetra Pak

Industrial Machinery Manufacturing

Dubai

Login to

Please Verify Your Phone or Email

Confirm Action

SIEM Platform Lead