Senior SIEM Integration Engineer

Quess Corp

Posted: 3 months ago
Openings: 10
Applicants: 0

Job Description

Job Title: Senior SIEM Integration Engineer (L2)

Department: CSOC
Experience: 4+ Years
Shift: General Shift
Location: Mumbai

Key Responsibilities:
• Monitor log ingestion health and ensure uninterrupted log flow into the SIEM platform.
• Investigate and resolve log ingestion issues related to connectors, agents, network connectivity, and APIs.
• Perform log onboarding and SIEM integrations for servers, applications, network, and security devices.
• Validate log parsing, field extraction, timestamp accuracy, and normalization.
• Troubleshoot log ingestion issues, parsing failures, and data gaps.
• Support integrations for Windows, Linux, Firewalls, VPNs, Proxies, IDS/IPS, WAF, and cloud log sources.
• Monitor SIEM connector performance and ensure compliance coverage for all critical assets.
• Coordinate with infrastructure and network teams to resolve log forwarding issues.
• Maintain SIEM integration documentation, SOPs, and onboarding trackers.
• Provide regular status updates on integrations, issues, and compliance coverage.

Required Skills:
• Hands-on experience with Microsoft Sentinel/Azure Sentinel or any enterprise SIEM platform (QRadar, Splunk, ArcSight, etc.).
• Experience with log onboarding using Syslog, Agents, APIs, and native SIEM connectors.
• Knowledge of Windows and Linux log sources, event forwarding, and troubleshooting.
• Understanding of network protocols such as TCP/UDP, DNS, HTTP/HTTPS, and Syslog.
• Experience integrating security devices such as Firewalls, VPNs, Proxies, IDS/IPS, and WAF.
• Hands-on experience with Regex and Grok for log parsing.
• Basic knowledge of KQL, SPL, or Lucene queries.
• Ability to troubleshoot log ingestion, parsing, and connectivity issues.
• Basic scripting knowledge in PowerShell, Bash, or Python is preferred.

Qualifications:
• BE/B.Tech (Computer Science/IT) or MCA.
• Certifications such as Microsoft Azure Fundamentals, CEH, RHCE, or Azure Administrator Associate are an added advantage.

Preferred Candidates: Immediate Joiners or candidates serving notice period.