SIEM Engineering Specialist

Job description

Company: TCS Skill : SIEM Engineering Specialist Experience: 6 to 10 years Location : Chennai **Job Description** - Design and maintain SIEM architecture across XSIAM, Sentinel and related log management platforms. - Lead log source onboarding, parser development, field mapping, normalization, enrichment and data validation. - Create and maintain correlation rules, detection use cases, dashboards and compliance reporting content. - Define log source standards, naming conventions, parsing requirements, retention strategy and ingestion control. - Monitor SIEM platform health, ingestion latency, EPS/GB volume, license utilization, parser errors and failed data sources. - Align detection coverage to MITRE ATT&CK, threat intelligence requirements, regulatory controls and business-critical assets. - Manage change control, testing, content promotion, rollback and documentation for SIEM engineering releases. - Mentor SOC analysts on query development, log interpretation and investigation workflows. **Required Technical Skills** - SIEM architecture, data onboarding, parsing, normalization and correlation engineering. - Expertise in XSIAM, Microsoft Sentinel, KQL, XQL and log source troubleshooting. - Cloud, endpoint, identity, network, email, web proxy and firewall telemetry understanding. - Detection engineering, MITRE ATT&CK mapping and false-positive reduction. - Scripting with Python or PowerShell, REST API integration and automation support.