Skip to Content
On-site

SIEM & SecOps Engineer II

Job Overview

As a Security Operations Implementation Engineer, you will be playing a pivotal role in enabling Zeta in implementing and integrating SIEMs, detecting and responding to attacks at an early stage and make sure infrastructure and applications are secure.

Key points

  1. Design, develop, and maintain high-fidelity detection rules, correlation rules, alerts, and security use cases for newly onboarded and existing log sources. Continuously tune detections…

  2. Develop security monitoring and detection content for AWS services, Kubernetes, microservices, Linux, macOS, databases, web applications, firewalls…

  3. Onboard new security and application log sources by developing Logstash pipelines, custom parsers, Grok patterns, ingest processors…

  4. Design and maintain operational dashboards, executive dashboards, SOC dashboards, and threat hunting visualizations using optimized OpenSearch Query DSL, aggregations…

  5. Bachelor of Technology (BE/B.Tech), M.Tech/ME in Computer Science or equivalent.

  6. Must have worked on the ELK/EFK implementation projects, and Logstash data parsing rules.

  7. Threat intelligence like OSINT, MISP, AlienVault, IDRBT etc.

  8. Expertise in Log monitoring tools like Splunk, ELK/EFK, SumLogic, Loggly etc.

Skills

AWSData VisualizationMicroservicesKubernetesCI/CDLinuxGitNetwork Security

Experience: Mid-level · 4–6 years · Job type: Full-time