FiniteHR Consulting Pvt Ltd Logo

FiniteHR Consulting Pvt Ltd

SIEM

Reposted 3 Months Ago
Be an Early Applicant
In-Office
Mumbai, Maharashtra, IND
Mid level
In-Office
Mumbai, Maharashtra, IND
Mid level
Implement, configure, and maintain SIEM: collect and retain logs (agent/agentless/ODBC), create complex detection rules and alerts, monitor dashboards/alerts daily, troubleshoot tool issues, coordinate vendors, manage tickets and escalations, configure reports/dashboards and compliance reporting, and meet SLA targets.
The summary above was generated by AI
Company Description

Client of FiniteHR, IT Product Development Company

Job Description

Our Client CMS Info systems is looking for SIEM

About our Client: http://www.cmsitservices.com/

Job Designation: SIEM

Job Location: Mumbai

Experience: 3-5Years.

Requirements:

1. Log and context data collection

• Collect all logs including operational logs and custom application logs

• Configuration of different technology devices by using agent-based\ agentless methods.

• Configuration of ODBC settings.        

2. Administration and Maintenance

• Configuration of device\host

• Daily Heath check of tool

• Vendor coordination for SIEM Tool Operational / Hardware issue. 

• Creation and modification rules and queries ( complex rules by aggregating more than two conditions)

• Creation and modification rules and queries

• Configuration and modification of alerts

• Troubleshooting of all errors in SIEM tool.

3. Monitoring and Analysis

• Daily Monitoring of Alerts.

• Daily Monitoring of Dashboards.

• Escalation of alerts as per defined process.

• Logging of tickets in ticketing tool.

• Assigning Tickets to respective owner for their response as per defined process

• Analysis of Critical Logs as defined by defined process.

• Follow-up on tickets till closure.

4. Alerting and Notification

• Configuration of alerts and notifications for all critical events of all on boarded technology

• Modification of alerts and notification

• Notifying Information Security team in case of any operational issue.

5. Reporting

• Daily Monitoring of Reports.

• Configuration of reports as per requirement.

• Scheduling of reports as per requirement.

• Configuration and customization of dashboards.

• Configuration of specific compliance reports as per requirement.

6. Log Retention

• Retain the logs as per defined process.

7. Proposed SLA and Penalty Clause

SLA Structure

Deliverables Resolution\ Deliverable Time Target Performance Measurement Frequency

Resolution of hardware issues T+1 100% As per occurrence

Resolution of software operational issues Within 4 hrs 100% As per occurrence

Closure of Critical Events T+1 99% Weekly

Closure of non-critical events T+2 97% Weekly

Reporting and Dashboard As per set Frequency 100% Daily\Weekly\Monthly

This is an Immediate Opportunity candidate with less than one month notice will be preferred.

Please ignore this mail if the above profile doesn’t match with your current Job Role.

Thank you for your Valuable Time

Hoping for a Prompt Response!!!

Best regards,

Eswar-Recruiter

FiniteHR Consulting Pvt Ltd

Additional Information

All your information will be kept confidential according to EEO guidelines.

Similar Jobs

7 Days Ago
In-Office or Remote
Senior level
Senior level
Artificial Intelligence • Fintech • Information Technology • Logistics • Payments • Business Intelligence • Generative AI
Lead security engineering efforts across multi-cloud environments by designing cloud security controls, policy-as-code guardrails, container protections, and automated remediation. Own vulnerability management and incident escalation, conduct forensics and root-cause analysis, translate compliance requirements into technical controls, and automate evidence collection. Mentor engineers, oversee threat modeling and architecture reviews, maintain security documentation, and participate in on-call operations.
Top Skills: AWSAws ConfigAws OrganizationsAzureCi/CdDastEdrGCPGitGoGuarddutyIamKmsKubernetesPolicy-As-CodePythonQualysSastScaSecurity HubService Control PoliciesSIEMSoarTenableTerraformVpcWiz
2 Hours Ago
In-Office or Remote
Mid level
Mid level
Fintech • Food • Payments • Software
Own security compliance, ISMS activities, audits, certifications, customer security assessments, policies, risk assessments, and control documentation. Support security operations, threat detection, incident investigations, cloud security, vulnerability management, application security, DevSecOps, and penetration testing. Collaborate with auditors, customers, engineering, and business stakeholders while automating compliance and security workflows.
Top Skills: AWSCi/CdCrowdstrikeDastDevsecopsEdrGCPGdprGrc PlatformsIsmsIso 27001Nist CsfOwasp Top 10Pci DssSastScaSIEMSoc 2SplunkUae Ia/Nesa
Senior level
Artificial Intelligence • Cloud • Fintech • Information Technology • Analytics • Financial Services • Cybersecurity
Conduct security monitoring, investigate and prioritize incidents, coordinate containment and remediation, perform threat hunting, improve detections and playbooks, maintain investigation records, support major incidents, and provide guidance to junior analysts within a global 24x7 security operations center.
Top Skills: Edr/XdrIds/IpsKqlMicrosoft Defender XdrMicrosoft SentinelMitre Att&CkSecurity AutomationServicenowSIEMThreat Intelligence

What you need to know about the Mumbai Tech Scene

From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account