Cybersecurity Admin Sec - SIEM Administrator

Greeting From TCS!!! Role: Cybersecurity Admin Sec - SIEM Administrator Experience: 8 to 12 Location: Chennai SN Responsibility of / Expectations from the Role 1 Conduct proactive threat hunting activities across endpoints, networks, cloud environments, and identity platforms. - Develop and execute threat hunting hypotheses based on threat intelligence, emerging attack trends, and organizational risks. - Identify Indicators of Compromise (IoCs), Indicators of Attack (IoAs), and suspicious behaviors.

2 Analyze security events to detect stealthy, persistent, and advanced threats. - Consume and operationalize cyber threat intelligence feeds.

3 Map adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework. - Track emerging threats, vulnerabilities, and attack campaigns. - Document hunting findings, attack patterns, and remediation recommendations. - Present threat hunt outcomes to security leadership and stakeholders.

4 Collaborate with SOC, Incident Response, Vulnerability Management, Red Team, and Security Engineering teams. Develop scripts and automation to improve threat hunting and investigation efficiency. 5 Continuously evaluate and improve security monitoring and detection coverage. Contribute to purple team exercises and detection validation activities.

6 Enhance threat detection capabilities within SIEM, EDR, NDR, and XDR platforms. 7 Develop hunt queries using KQL, SPL, SQL, Sigma, YARA, or similar technologies. 8 Support incident response activities for malware infections, ransomware, insider threats, credential compromise, and APT attacks.