Engineer- Platform Engineering

About The Company

Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications

• SIEM Operations – Support day-to-day SIEM monitoring, administration, health checks, and troubleshooting.
• Log Source Onboarding – Configure and onboard Windows, Linux, Firewall, EDR, WAF, Cloud, VPN, and other security log sources.
• Log Collection Troubleshooting – Troubleshoot missing logs, parsing issues, connectivity problems, ingestion delays, and data-quality issues.
• Detection Rule Development – Develop and maintain SIEM correlation rules and detection use cases based on security threats and attack scenarios.
• Detection Tuning – Analyze false positives and optimize detection rules to improve detection accuracy and reduce alert noise.
• MITRE ATT&CK Mapping – Map detection use cases to relevant MITRE ATT&CK tactics, techniques, and sub-techniques.
• Threat Hunting – Perform basic threat hunting using SIEM queries to identify suspicious activities and potential security threats.
• Security Event Analysis – Analyze Windows, Linux, network, endpoint, authentication, and cloud security events to identify malicious behavior.
• SIEM Query & Scripting – Develop queries using platforms such as KQL, SPL, or LogRhythm and use basic Python, PowerShell, or Bash for automation and analysis.
• Detection Improvement & Documentation – Identify detection gaps, support new use-case development, validate detections, and maintain detection engineering and SIEM documentation.