Cybersecurity admin sec - siem administrator

Tata Consultancy Services · Mannady (chennai), India

Greeting From TCS!!!
Role: Cybersecurity Admin Sec - SIEM Administrator
Experience: 8 to 12
Location: Chennai
SN
Responsibility of / Expectations from the Role
1
Conduct proactive threat hunting activities across endpoints, networks, cloud environments, and identity platforms. - Develop and execute threat hunting hypotheses based on threat intelligence, emerging attack trends, and organizational risks.
- Identify Indicators of Compromise (Io Cs), Indicators of Attack (Io As), and suspicious behaviors.

2
Analyze security events to detect stealthy, persistent, and advanced threats.
- Consume and operationalize cyber threat intelligence feeds.

3
Map adversary tactics, techniques, and procedures (TTPs) to the MITRE ATT& CK framework.

4
Collaborate with SOC, Incident Response, Vulnerability Management, Red Team, and Security Engineering teams.
Develop scripts and automation to improve threat hunting and investigation efficiency.
5
Continuously evaluate and improve security monitoring and detection coverage.
Contribute to purple team exercises and detection validation activities.

6
Enhance threat detection capabilities within SIEM, EDR, NDR, and XDR platforms.
7
Develop hunt queries using KQL, SPL, SQL, Sigma, YARA, or similar technologies.
8
Support incident response activities for malware infections, ransomware, insider threats, credential compromise, and APT attacks.