{"id":3446340,"url":"https://alion.io/job/incedo-senior-siem-engineer-information-security","title":"Senior SIEM Engineer - Information Security","company":{"id":177799,"name":"Incedo","domain":"incedoinc.com","url":"https://alion.io/company/incedo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-29T08:08:03Z","employer_posted_date":null,"last_verified_at":"2026-10-29T08:08:03Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Role Overview :\n\nWe are looking for a Senior SIEM Engineer with strong hands-on experience in SIEM platform administration, log integration, parsing, detection engineering, and performance optimization within an enterprise SOC/MSSP environment.\n\nKey Responsibilities :\n\n- Administer, maintain, and optimize enterprise SIEM platforms.\n\n- Onboard log sources and develop custom parsers, field extraction, and log normalization.\n\n- Develop, tune, and optimize correlation rules, detection use cases, and threat-hunting queries aligned with MITRE ATT&CK.\n\n- Create searches, dashboards, and reports while reducing false positives.\n\n- Monitor SIEM health, event processing, indexing, storage, and system performance.\n\n- Troubleshoot production issues, support upgrades, patching, and critical incidents.\n\n- Integrate security logs from firewalls, IDS/IPS, EDR, Windows/Linux, cloud, applications, and identity platforms.\n\n- Ensure log collection using Syslog, CEF, LEEF, JSON, XML, and custom formats.\n\n- Support automation, SOAR integrations, documentation, and continuous service improvement.\n\nRequired Technical Skills:\n\n- SIEM Engineering: Platform administration, log onboarding, parsing, normalization, event correlation, and troubleshooting.\n\n- Detection Engineering: Correlation rules, use-case development, rule tuning, threat hunting, and MITRE ATT&CK.\n\n- Platform Management: Health monitoring, performance optimization, indexing, storage, upgrades, and capacity planning.\n\n- Security Technologies: Firewalls, IDS/IPS, EDR, Windows/Linux, Active Directory, network devices, and cloud security.\n\n- Networking & Logs: TCP/IP, DNS, HTTP/HTTPS, Syslog, authentication protocols, CEF, LEEF, JSON, and XML.\n\n- Automation: Python, PowerShell, or Shell scripting; REST APIs and SOAR integrations are preferred.\n\n- Cloud & Threat Intelligence: AWS/Azure/GCP/OCI and threat intelligence integrations are an advantage.\n\nExperience & Qualifications :\n\n- 5 - 8 years in cybersecurity, including at least 4 years in SIEM or security platform engineering.\n\n- Hands-on experience in enterprise SOC/MSSP environments, preferably supporting 24x7 operations.\n\n- Strong troubleshooting, analytical, documentation, and client communication skills.\n\n- SIEM vendor certifications or Security+, CySA+, GCIH, GCIA, or equivalent certifications are preferred.\nSkills\nInformation Security, Threat Hunting, Python, PowerShell, Shell Scripting, SIEM, Cyber Security","description_format":"text","description_chars":2442,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Operations","Analytics & BI Consulting","Data Engineering & Migration Services"],"lifecycle":[{"event":"open","at":"2026-10-29T08:29:10Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/incedo-senior-siem-engineer-information-security","json_url":"https://alion.io/job/incedo-senior-siem-engineer-information-security.json","meta":{"generated_at":"2026-10-31T10:29:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16049,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177799},"rest":"https://alion.io/mcp/rest/get_company?id=177799"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fincedo-senior-siem-engineer-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fincedo-senior-siem-engineer-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fincedo-senior-siem-engineer-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/incedo-senior-siem-engineer-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fincedo-senior-siem-engineer-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3446340}},{"tool":"search_jobs","arguments":{"company":"incedoinc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3446340},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}