SIEM & SecOps Engineer II
ZetaBanking Tech company
HyderabadSenior
SoftBank Vision Fund 2
Mastercard
Sodexo
Optum
Software Engineering
About the role
TL;DR
Join our SOC as a SIEM & SecOps Engineer II to enhance our cloud-native SIEM platform.
- •We are looking for a passionate and technically strong Detection Engineer / SOC Analyst to join our Security Operations Centre (SOC).
- •The ideal candidate should have a strong foundation in cybersecurity, be eager to learn, and be capable of contributing to detection engineering, incident response, and the continuous improvement of our cloud-native SIEM platform under the guidance of the SOC Lead.
- •Key Responsibilities Design, develop, tune, and maintain SIEM detection use cases and correlation rules.
- •Investigate and triage security alerts escalated from L1 analysts across multiple security platforms, including: Network Firewalls, Web Application Firewalls (WAF), Cloud Platforms, Endpoint Security (Linux/macOS), and other security monitoring solutions.
- •Perform threat investigations with a strong focus on Linux security mainly on MacOS devices, including threat hunting, log analysis, and detection engineering.
- •Create, tune, and optimize dashboards, alerts, detection logic, parsers, and log collection pipelines.
- •Build and maintain log ingestion workflows using tools such as Logstash, Fluentd, Fluent Bit, or similar ETL/data pipeline technologies.
- •Requirements Good understanding of SIEM query languages such as OpenSearch Query DSL, Sigma, or similar detection rule/query languages.
- •Comfortable working with open-source security tools and modern security engineering practices.
- •Experience supporting SOAR automation and playbook development.
- •Ability to investigate alerts across cloud, endpoint, network, and application security technologies.
- •Strong analytical, troubleshooting, and communication skills with the ability to work independently while collaborating effectively within the SOC team.
Required skills
PythonKubernetesBashGitCI/CD
Domain expertise
fintech
Tech stack
KubernetesPythonBashGitCI/CD