Senior SOC Infrastructure (Noida)

Senior SIEM and SOC Platform Engineer Position Overview Cyber Sigma is looking for a Senior SIEM and SOC Platform Engineer to design and build an enterprise-grade Security Information and Event Management and Security Operations platform. The candidate will be responsible for security-data ingestion, normalization, enrichment, detection engineering, correlation, alerting, investigation, orchestration, case management, dashboards and platform operations. The candidate should have the ability to create a product-oriented SIEM platform instead of only installing or administering an existing tool. Key Responsibilities SIEM Platform Architecture - Design a scalable, multi-tenant SIEM architecture. - Build log-collection, ingestion and processing pipelines. - Develop secure agent and agentless data-collection mechanisms. - Design hot, warm, cold and archive data-retention tiers. - Implement high availability, fault tolerance and disaster recovery. - Design secure tenant isolation and customer-specific workspaces. - Establish role-based access for SOC analysts, customers and administrators. - Develop platform-health, pipeline-health and data-quality monitoring. - Optimize the platform for performance, storage and search efficiency. Log Collection and Integration Develop integrations and parsers for: - Windows systems - Linux systems - Network devices - Firewalls - VPN systems - Active Directory - Identity and access-management platforms - Endpoint-security products - Cloud platforms - Email-security systems - Web applications - Databases - Containers and Kubernetes - SaaS applications - API gateways - Vulnerability scanners - Threat-intelligence feeds - Custom business applications Detection Engineering - Create and maintain detection rules and correlation logic. - Map detections to recognized attack techniques and tactics. - Develop use cases for authentication, privilege abuse, lateral movement, malware, data exfiltration, cloud attacks and insider threats. - Bu .