{"id":2550861,"url":"https://alion.io/job/hcltech-solution-architect-security-investigations-siem","title":"Solution Architect - Security Investigations, SIEM","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":50000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":33},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AIOps","optional":false},{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"Copilot","optional":false},{"name":"Copilot Studio","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-14T17:55:45Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T07:43:30Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Summary\nSenior AI & Automation Engineer - Cyber Security & Security Operations\nKey Responsibilities\nSecurity Automation Engineering\nDesign, develop, and maintain enterprise security automation solutions.\nIdentify repetitive security activities suitable for automation.\nBuild reusable automation frameworks and playbooks.\nAutomate security investigations and remediation workflows.\nDevelop Infrastructure-as-Code and Security-as-Code capabilities.\nStandardize security operations across global environments.\nDrive continuous improvement through automation and AI. ________________________________________ Security Operations (SOC) Automation Develop and maintain automation for:\nIncident triage\nSecurity alert enrichment\nThreat intelligence collection\nMalware response\nPhishing investigations\nEndpoint response\nPrivileged access reviews\nCompliance validation Design workflows that:\nReduce analyst workload\nImprove Mean Time to Detect (MTTD)\nImprove Mean Time to Respond (MTTR)\nIncrease investigation consistency\nMinimize false positives ________________________________________ Microsoft Security Platform Design and automate solutions across: Microsoft Sentinel\nIncident automation\nSOAR playbooks\nThreat hunting workflows\nAlert enrichment\nAutomated investigations\nSecurity dashboards Microsoft Defender Suite\nDefender XDR\nDefender for Endpoint\nDefender for Identity\nDefender for Cloud Apps\nDefender for Office 365\nDefender for Cloud Microsoft Entra ID\nIdentity Governance\nPrivileged Identity Management (PIM)\nConditional Access\nAccess Reviews\nIdentity Lifecycle Automation Microsoft Purview\nData Loss Prevention\nInformation Protection\nCompliance automation\nData classification ________________________________________ AI-Powered Security Operations Build and support:\nAI-driven threat detection\nSecurity Copilot integrations\nCopilot Studio security agents\nAutomated threat analysis\nAI-assisted incident response\nSecurity knowledge assistants\nSecurity operations chatbots Develop solutions that:\nAccelerate investigations\nImprove threat correlation\nReduce manual analysis\nSupport proactive threat hunting ________________________________________ ServiceNow Security Operations Develop and optimize:\nSecurity Incident Response workflows\nVulnerability Response processes\nRisk Management workflows\nChange Risk Assessment\nSecurity Governance integrations Integrate ServiceNow with:\nMicrosoft Sentinel\nMicrosoft Defender\nVulnerability scanners\nCMDB platforms\nIdentity systems\nSIEM/SOAR tooling ________________________________________ Red Hat Ansible Security Automation Develop automation for:\nServer hardening\nSecurity configuration compliance\nVulnerability remediation\nPatch deployment\nSecurity baseline validation\nCertificate lifecycle management Manage and maintain:\nAnsible playbooks\nAutomation repositories\nConfiguration standards\nCompliance frameworks The broader automation strategy highlights the use of industrialised automation through technologies such as Ansible, PowerShell, standardised patterns, and governed delivery processes. ________________________________________ Vulnerability & Compliance Automation Drive automation initiatives related to:\nVulnerability scanning\nPatch compliance\nConfiguration drift detection\nSecurity benchmarks\nRegulatory compliance monitoring\nAudit evidence collection Support frameworks such as:\nISO 27001\nNIST\nCIS Controls\nSOC2\nCorporate cyber security standards ________________________________________ Security Engineering & DevSecOps Support and automate:\nSecurity controls validation\nCI/CD security integrations\nInfrastructure compliance checks\nSecrets management\nCertificate management\nApplication security workflows Implement:\nSecurity guardrails\nAutomated approvals\nSecurity policy enforcement\nCompliance monitoring ________________________________________ Required Technical Skills Microsoft Security Stack Strong experience with:\nMicrosoft Sentinel\nMicrosof\nSkill Requirements\nPreferred Certifications Microsoft\nMicrosoft Certified Cybersecurity Architect Expert\nMicrosoft Security Operations Analyst\nMicrosoft Identity and Access Administrator Security\nCISSP\nCISM\nGIAC Certifications\nSecurity+ Automation\nRed Hat Certified Specialist in Ansible Automation\nMicrosoft Power Platform Certifications ServiceNow\nServiceNow Certified System Administrator\nServiceNow Security Operations Specialist ________________________________________ Success Metrics Within the first 12 months, you will:\nReduce manual security operations workload.\nAutomate high-volume security investigations.\nDecrease security incident response times.\nImprove vulnerability remediation speed.\nImprove compliance reporting accuracy.\nDeploy AI-driven security assistants.\nIncrease automation coverage across security domains.\nImprove audit readiness and evidence collection.\nReduce security operational costs.\nImplement measurable Security-AIOps capabilities.\nOther Requirements\nRequired Qualifications Education\nBachelor's degree in Cyber Security, Computer Science, Engineering, Information Technology, or equivalent experience. Experience\n5+ years within Cyber Security, Security Engineering, Security Operations, or Security Automation.\nExperience working in enterprise-scale security environments.\nExperience building automation and orchestration workflows.\nExperience integrating Microsoft security technologies with ServiceNow.\nExperience developing scripts and security automation solutions.","description_format":"text","description_chars":5420,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Information Security","IT Consulting & Digital Transformation","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-14T17:55:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-solution-architect-security-investigations-siem","json_url":"https://alion.io/job/hcltech-solution-architect-security-investigations-siem.json","meta":{"generated_at":"2026-10-15T10:42:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16238,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-solution-architect-security-investigations-siem"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-solution-architect-security-investigations-siem"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-solution-architect-security-investigations-siem"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-solution-architect-security-investigations-siem\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-solution-architect-security-investigations-siem"}]}