Security Information and Event Management Engineer Jobs in Chennai Cyber Security Company

📋 Job Description

Jobzi is sourcing qualified candidates for Security Information and Event Management Engineer positions in Chennai's private Cyber Security Company sector. This is a full-time opportunity with a reputed Cyber Security and Information Security employer in Chennai offering competitive salary, structured growth, and a professional work environment. Tamil communication skills are preferred alongside English for professional and business interaction in Chennai.

📌 Key Responsibilities

• Deploy, configure, and maintain SIEM platforms including Splunk, IBM QRadar, or Microsoft Sentinel for client environments on-premises and in the cloud.
• Onboard log sources from firewalls, servers, endpoints, cloud services, and applications into the SIEM ensuring proper parsing, normalisation, and retention.
• Develop, test, and tune correlation rules, detection use cases, and alert logic based on client risk profiles and the current threat landscape.
• Build and maintain SIEM dashboards, reports, and visualisations for SOC analysts, security managers, and compliance stakeholders.
• Monitor SIEM platform health, license utilisation, indexing throughput, and data pipeline integrity to ensure consistent detection coverage.
• Integrate SIEM with threat intelligence feeds, SOAR platforms, UEBA solutions, and vulnerability management tools to enrich detection capabilities.
• Perform log source gap analysis and detection coverage assessments using the MITRE ATTandCK framework to identify blind spots in client monitoring.

🎓 Qualifications and Requirements

• B.E. or B.Tech in Computer Science or Information Technology with two to six years of SIEM engineering and administration experience.
• Hands-on proficiency with at least one enterprise SIEM platform: Splunk Enterprise Security (including SPL query development), IBM QRadar, or Microsoft Sentinel (including KQL).
• Experience onboarding diverse log sources including Windows Event Logs, syslog, CEF, LEEF, and REST API-based cloud service integrations.
• Demonstrated ability to develop and tune correlation rules and detection use cases that reduce false positives while maintaining high detection fidelity.
• Understanding of log normalisation, field extraction, and Common Information Model (CIM) or SIEM-native data models for structured detection logic.
• Familiarity with integrating SIEM platforms with threat intelligence platforms (TIP), SOAR, and identity data sources for enriched alert context.
• Splunk Core Certified Power User, Splunk Enterprise Security Certified Admin, QRadar SIEM Foundation, or SC-200 (Microsoft Security Operations Analyst) preferred.
• Good Tamil and English communication skills for team coordination and client interaction in Chennai.

✅ Required Skills